SUSE-SU-2024:0140-1: libssh&distro=openSUSE Leap 15.5

CVSS: UnknownPublished
Published 18-01-2024Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2024:0140-1 is a vulnerability in libssh&distro=openSUSE Leap 15.5 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2023-1667CVE-2023-2283CVE-2023-48795CVE-2023-6004CVE-2023-6918

Timeline

  1. 18-01-2024
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for libssh This update for libssh fixes the following issues: Security fixes: - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209) - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126) - CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186) - CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm guessing (bsc#1211188) - CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190) Other fixes: - Update to version 0.9.8 - Allow @ in usernames when parsing from URI composes - Update to version 0.9.7 - Fix several memory leaks in GSSAPI handling code

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse11 products
  • libssh&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 0.9.8-150400.3.3.1
  • libssh&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 0.9.8-150400.3.3.1
  • libssh&distro=SUSE Linux Enterprise Micro 5.3< 0.9.8-150400.3.3.1
  • libssh&distro=SUSE Linux Enterprise Micro 5.4< 0.9.8-150400.3.3.1
  • libssh&distro=SUSE Linux Enterprise Micro 5.5< 0.9.8-150400.3.3.1
Opensuse3 products
  • libssh&distro=openSUSE Leap 15.5< 0.9.8-150400.3.3.1
  • libssh&distro=openSUSE Leap Micro 5.3< 0.9.8-150400.3.3.1
  • libssh&distro=openSUSE Leap Micro 5.4< 0.9.8-150400.3.3.1

2 vendors · 14 products

References

11 links
Show all 11 references