Уязвимость CVE-2012-4559: Информация

Описание

Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file function in keyfiles.c in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Важность: MEDIUM (6,8)

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:libssh:libssh:0.5.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libssh:libssh:0.5.0:rc1:*:*:*:*:*:*

      ---

      cpe:2.3:a:libssh:libssh:0.4.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libssh:libssh:0.5.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libssh:libssh:0.4.8:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*

      End including

      0.5.2

      ---