CVE-2014-8132: canonical ubuntu_linux
CVSS: 5.0v2.0MediumModified
AliasesMGASA-2015-0014UBUNTU-CVE-2014-8132USN-2478-1DEBIAN-CVE-2014-8132
Published 29-12-2014Last modified 06-08-2024
Vulnerability summary
CVE-2014-8132 is a medium (CVSS 5.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 5.15% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
5.15%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 29-12-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
5.15%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 5.15% on 21-09-2026
21-09-202621-10-2026
EPSS score5.15%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian2 products
- libssh< 0.6.3-4
- debian_linuxEOL7.0 | 8.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 14.10
Fedoraproject1 product
- fedoraEOL19 | 20 | 21
Libssh1 product
- libssh0.5.0 | 0.5.2 | 0.5.3 | 0.5.4 | 0.5.5 | 0.6.0 | 0.6.1 | 0.6.2 | 0.6.3
Mageia1 product
- libssh< 0.5.5-2.2.mga4
Opensuse1 product
- opensuseEOL12.3 | 13.1 | 13.2
Ubuntu1 product
- libssh< 0.6.1-0ubuntu3.1
7 vendors · 8 products
References
20 links- bugzilla.redhat.com/show_bug.cgi?id=1158089X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB Entry
- lists.fedoraproject.org/pipermail/package-announce/2015-January/147464.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-January/147452.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/X Refsource CONFIRMPatchVendor AdvisoryREPORT
- www.mandriva.com/security/advisories?name=MDVSA-2015:020Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
Show all 20 references
- lists.opensuse.org/opensuse-updates/2015-01/msg00007.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-January/147367.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory