A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsshalma-upgrade-libssh-configalma-upgrade-libssh-devel | May 4, 2022 | Apr 13, 2020 | |
| Alpine Linux | alpine-linux-upgrade-libssh | Aug 22, 2024 | Apr 13, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Apr 13, 2020 | |
| Centos_linux | — | centos-upgrade-libsshcentos-upgrade-libssh-configcentos-upgrade-libssh-debuginfocentos-upgrade-libssh-debugsourcecentos-upgrade-libssh-devel | Nov 5, 2020 | Apr 13, 2020 |
| Debian | debian-upgrade-libssh | Jul 30, 2024 | Apr 13, 2020 | |
| Dell Powerstore Dsa2024398 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 17, 2024 | |
| Dell Powerstore Dsa2024408 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Sep 26, 2024 | |
| Dell Powerstore Dsa2024432 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 29, 2024 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Jul 14, 2020 | |
| Freebsd | freebsd-upgrade-package-libssh | Apr 20, 2020 | Apr 19, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-libssh | Apr 13, 2020 | Apr 10, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libssh | Apr 21, 2020 | Apr 13, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-libsshoracle-linux-upgrade-libssh-configoracle-linux-upgrade-libssh-devel | Nov 13, 2020 | Apr 9, 2020 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Apr 13, 2020 | |
| Redhat_linux | redhat-upgrade-libsshredhat-upgrade-libssh-configredhat-upgrade-libssh-debuginforedhat-upgrade-libssh-debugsourceredhat-upgrade-libssh-devel | Nov 5, 2020 | Apr 13, 2020 | |
| Rocky_linux | rocky-upgrade-libsshrocky-upgrade-libssh-debuginforocky-upgrade-libssh-debugsourcerocky-upgrade-libssh-devel | Mar 12, 2024 | Apr 13, 2020 | |
| Suse | — | suse-upgrade-libssh-configsuse-upgrade-libssh-develsuse-upgrade-libssh4suse-upgrade-libssh4-32bit | Apr 10, 2020 | Apr 9, 2020 |
| Ubuntu | ubuntu-upgrade-libssh-4 | Apr 10, 2020 | Apr 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub