libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libssh-devel | May 4, 2022 | Jul 29, 2020 |
| Alpine Linux | — | Upgrade libssh | Aug 22, 2024 | Jul 29, 2020 |
| Centos_linux | — | Upgrade libssh-develUpgrade libssh-configUpgrade libsshUpgrade libssh-debugsourceUpgrade libssh-debuginfo | Nov 10, 2021 | Jul 29, 2020 |
| Debian | — | Upgrade libssh | Aug 4, 2020 | Jul 29, 2020 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade net-libs/libssh. | Nov 3, 2020 | Jul 29, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh | Jan 20, 2021 | Jul 29, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libssh | Dec 15, 2020 | Jul 29, 2020 |
| Oracle_linux | — | Upgrade libsshUpgrade libssh-configUpgrade libssh-devel | Nov 17, 2021 | Jul 30, 2020 |
| Redhat_linux | — | Upgrade libssh-debuginfoUpgrade libssh-debugsourceUpgrade libssh-develNo solution existsUpgrade libsshUpgrade libssh-config | Nov 10, 2021 | Jul 29, 2020 |
| Rocky_linux | — | Upgrade libssh-debuginfoUpgrade libssh-debugsourceUpgrade libsshUpgrade libssh-devel | Mar 12, 2024 | Jul 29, 2020 |
| Suse | — | Upgrade libssh-configUpgrade libssh4-32bitUpgrade libssh4Upgrade libssh-devel | Aug 9, 2024 | Jul 29, 2020 |
| Ubuntu | — | Upgrade libssh-4 | Aug 5, 2020 | Jul 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub