A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsshalma-upgrade-libssh-configalma-upgrade-libssh-devel | Jul 4, 2023 | May 26, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libsshamazon-linux-2023-upgrade-libssh-configamazon-linux-2023-upgrade-libssh-debuginfoamazon-linux-2023-upgrade-libssh-debugsourceamazon-linux-2023-upgrade-libssh-devel | Feb 17, 2025 | May 5, 2023 | |
| Centos_linux | — | centos-upgrade-libsshcentos-upgrade-libssh-configcentos-upgrade-libssh-debuginfocentos-upgrade-libssh-debugsourcecentos-upgrade-libssh-devel | Jun 28, 2023 | May 26, 2023 |
| Debian | debian-upgrade-libssh | May 24, 2023 | May 24, 2023 | |
| Dell Powerstore Dsa2024398 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 17, 2024 | |
| Dell Powerstore Dsa2024408 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Sep 26, 2024 | |
| Dell Powerstore Dsa2024432 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 29, 2024 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Feb 24, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-libssh | Dec 27, 2023 | May 26, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libssh | Jul 18, 2023 | May 26, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libssh | Jan 10, 2024 | May 26, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libssh | Aug 9, 2023 | May 26, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 22, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libsshoracle-linux-upgrade-libssh-configoracle-linux-upgrade-libssh-devel | Jun 30, 2023 | May 5, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libsshredhat-upgrade-libssh-configredhat-upgrade-libssh-debuginforedhat-upgrade-libssh-debugsourceredhat-upgrade-libssh-devel | Jun 28, 2023 | May 26, 2023 | |
| Rocky_linux | rocky-upgrade-libsshrocky-upgrade-libssh-debuginforocky-upgrade-libssh-debugsourcerocky-upgrade-libssh-devel | Mar 5, 2024 | May 26, 2023 | |
| Suse | — | suse-upgrade-libssh-configsuse-upgrade-libssh-develsuse-upgrade-libssh4suse-upgrade-libssh4-32bit | Jan 19, 2024 | May 26, 2023 |
| Ubuntu | ubuntu-upgrade-libssh-4 | Jun 6, 2023 | May 26, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub