A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libssh-configUpgrade libssh-develUpgrade libssh | May 4, 2022 | Apr 13, 2020 |
| Alpine Linux | — | Upgrade libssh | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Centos_linux | — | Upgrade libssh-debuginfoUpgrade libssh-develUpgrade libssh-debugsourceUpgrade libssh-configUpgrade libssh | Nov 5, 2020 | Apr 13, 2020 |
| Debian | — | Upgrade libssh | Jul 30, 2024 | Apr 13, 2020 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 14, 2020 |
| Freebsd | — | Upgrade libssh | Apr 20, 2020 | Apr 19, 2020 |
| Gentoo Linux | — | Upgrade net-libs/libssh. | Apr 13, 2020 | Apr 10, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libssh | Apr 21, 2020 | Apr 13, 2020 |
| Oracle_linux | — | Upgrade libssh-configUpgrade libsshUpgrade libssh-devel | Nov 13, 2020 | Apr 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Apr 13, 2020 |
| Redhat_linux | — | Upgrade libssh-develUpgrade libsshUpgrade libssh-debuginfoUpgrade libssh-configUpgrade libssh-debugsource | Nov 5, 2020 | Apr 13, 2020 |
| Rocky_linux | — | Upgrade libssh-develUpgrade libssh-debugsourceUpgrade libssh-debuginfoUpgrade libssh | Mar 12, 2024 | Apr 13, 2020 |
| Suse | — | Upgrade libssh4-32bitUpgrade libssh4Upgrade libssh-develUpgrade libssh-config | Apr 10, 2020 | Apr 9, 2020 |
| Ubuntu | — | Upgrade libssh-4 | Apr 10, 2020 | Apr 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub