CVE-2023-6918

Katalog CVE

CVSS 5.3 · Medium EPSS 1,4%

Kerentanan Unchecked Return Value pada libssh, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.

Rincian

Terbit di NVD

19 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-252: Unchecked Return Value

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-6918 mailing list · advisory vendor
• https://www.libssh.org/security/advisories/CVE-2023-6918.txt advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2254997 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:2504
• https://access.redhat.com/errata/RHSA-2024:3233
• https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/ release notes
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YB...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36...
• https://security.netapp.com/advisory/ntap-20250214-0009/