A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 4.7 | Medium | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
| Product | Vendor | Version |
|---|---|---|
| Red Hat Enterprise Linux 10 | Red Hat | n/a |
| <= 6.1.03.05 | ||
| Red Hat Enterprise Linux 10 | Red Hat | < 10.0.17763.4252 |
| Red Hat Enterprise Linux 8 | Red Hat | < 10.0.17763.4252 |
| Red Hat Enterprise Linux 9 | Red Hat | <= 11.0.0.25 |
| Red Hat Enterprise Linux 8 | Red Hat | n/a |
| Red Hat Enterprise Linux 9 | Red Hat | 1.0.0 to 21.0.7 |
| Red Hat Enterprise Linux 7 | Red Hat | n/a |
| Red Hat Enterprise Linux 6 | Red Hat | n/a |
| Red Hat Enterprise Linux 7 | Red Hat | Android-13 |
| Red Hat OpenShift Container Platform 4 | Red Hat | n/a |