Low: libssh security update
Summary
ALSA-2024:2504: Low: libssh security update. Affects libssh versions < 0.10.4-13.el9. Fixed in 0.10.4-13.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libssh is a library that implements the SSH protocol, allowing the development of client and server applications. It provides a secure means of communication over networks and is widely used for remote administration and file transfers. The library offers various features and functionalities to facilitate SSH connections and data exchange.
Vulnerability Detail
The libssh library is affected by two security vulnerabilities:
-
ProxyCommand/ProxyJump features allow the injection of malicious code through the hostname (CVE-2023-6004). This vulnerability enables an attacker to execute arbitrary commands on the target system by manipulating the SSH connection parameters.
-
Missing checks for return values for digests (CVE-2023-6918). This vulnerability allows an attacker to bypass the integrity checks of SSH connections, potentially leading to unauthorized access or data tampering.
These vulnerabilities pose a risk to systems utilizing libssh, as they can be exploited to compromise the confidentiality, integrity, and availability of SSH connections and the underlying systems.
How To Fix
Minimum fixed version
0.10.4-13.el9
This is the first release that contains the fix.
sudo dnf update libsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
libssh is affected by two security vulnerabilities that can be exploited to execute arbitrary commands and bypass integrity checks. To mitigate these risks, it is crucial to update the libssh package to version 0.10.4-13.el9 or later. This update includes patches that address the identified vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libssh →
FAQ
libssh is a library that implements the SSH protocol, allowing the development of client and server applications for secure remote administration and file transfers.
CVE-2023-6004 allows an attacker to inject malicious code through the hostname, potentially leading to the execution of arbitrary commands on the target system.
CVE-2023-6918 allows an attacker to bypass integrity checks of SSH connections, potentially leading to unauthorized access or data tampering.
To fix these vulnerabilities, update the libssh package to version 0.10.4-13.el9 or later using the package manager of the AlmaLinux 9 distribution.
No specific workaround has been provided for these vulnerabilities. It is recommended to apply the available security update.
Related vulnerabilities
Recent vulnerabilities recorded for libssh.
