CVE-2012-4561: libssh

EPSS trend

Probability

4.75%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.75% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

14 links

www.debian.org/security/2012/dsa-2577Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDVSA-2012:175Vendor AdvisoryX Refsource MANDRIVA
bugzilla.redhat.com/show_bug.cgi?id=871617X Refsource MISC
www.ubuntu.com/usn/USN-1640-1Vendor AdvisoryX Refsource UBUNTU
lists.opensuse.org/opensuse-updates/2013-01/msg00021.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-updates/2012-12/msg00016.htmlVendor AdvisoryX Refsource SUSE
lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.htmlVendor AdvisoryX Refsource SUSE
www.openwall.com/lists/oss-security/2012/11/20/3Mailing ListX Refsource MLIST
exchange.xforce.ibmcloud.com/vulnerabilities/80220VDB EntryX Refsource XF

Show all 14 references

lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/56604VDB EntryX Refsource BID
www.libssh.org/2012/11/20/libssh-0-5-3-security-release/X Refsource CONFIRMVendor Advisory
security-tracker.debian.org/tracker/CVE-2012-4561Advisory

Related vulnerabilities

CVE-2018-10933alpinelibssh+2791.79%8y ago17-10-2018 12:00A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.CVE-2013-0176debianlibssh+13.05%13y ago05-02-2013 23:11The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.CVE-2021-3634debianlibssh+144.68%5y ago31-08-2021 00:00A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.CVE-2015-3146canonicalubuntu_linux+93.96%10y ago13-04-2016 17:00The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.CVE-2016-0739canonicalubuntu_linux+182.43%10y ago13-04-2016 17:00libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."CVE-2025-14821chainguardlibssh+70.13%6mo ago07-04-2026 16:34A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.

All vulnerabilities inlibssh

CVE-2012-4561: libssh

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References