libssh: Denial of service

libssh: Denial of service A vulnerability in libssh could lead to a Denial of Service condition. libssh 2020-11-03 2020-11-03 734624 remote 0.9.5 0.9.5

libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side.

libssh was found to have a NULL pointer dereference in tftpserver.c if the function ssh_buffer_new returns NULL.

An attacker could cause a possible Denial of Service condition.

There is no known workaround at this time.

All libssh users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.9.5"

CVE-2020-16135 sam_c sam_c