Low: libssh security update
Summary
RLSA-2024:3233: Low: libssh security update. Affects libssh versions < 0:0.9.6-14.el8. Fixed in 0:0.9.6-14.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libssh is a library that implements the SSH protocol, allowing the development of client and server applications. It is commonly used for secure remote administration and file transfer between systems. The library provides functions and features to establish secure connections and authenticate users using SSH. However, a vulnerability has been discovered in libssh that could potentially allow an attacker to inject malicious code through the hostname parameter, as well as missing checks for return values for digests.
Vulnerability Detail
The first vulnerability (CVE-2023-6004) in libssh involves the ProxyCommand/ProxyJump features, which can be exploited to inject malicious code through the hostname parameter. An attacker could craft a specially crafted hostname that, when processed by libssh, executes arbitrary code on the target system. This could lead to remote code execution and unauthorized access to sensitive information.
The second vulnerability (CVE-2023-6918) relates to missing checks for return values for digests in libssh. This could allow an attacker to bypass authentication or tamper with the integrity of SSH connections, potentially leading to unauthorized access or data manipulation.
How To Fix
Minimum fixed version
0:0.9.6-14.el8
This is the first release that contains the fix.
sudo dnf update libsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities. However, it is crucial to update libssh to the latest version as soon as possible to mitigate the risk of exploitation.
Conclusion
libssh is a library used for implementing the SSH protocol in client and server applications. However, two vulnerabilities have been discovered that could allow an attacker to inject malicious code and bypass authentication or tamper with SSH connections. To mitigate these risks, it is crucial to update libssh to version 0.9.6-14.el8 or later. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libssh →
FAQ
libssh is a library that implements the SSH protocol, allowing the development of secure client and server applications for remote administration and file transfer.
CVE-2023-6004 allows an attacker to inject malicious code through the hostname parameter, potentially leading to remote code execution and unauthorized access to sensitive information.
CVE-2023-6918 involves missing checks for return values for digests, which could allow an attacker to bypass authentication or tamper with SSH connections, potentially leading to unauthorized access or data manipulation.
You can update libssh by obtaining the latest version (0.9.6-14.el8 or later) from the official Rocky Linux repositories or using package management tools like yum or dnf.
There are no specific workarounds mentioned for these vulnerabilities. It is recommended to update libssh to the latest version to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for libssh.
