CVE-2015-1782

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 11-03-2015 01:00

Last modified: - 11-03-2015 01:00

Total changes: - 10

Description

CVE-2015-1782 libssh2: Using SSH_MSG_KEXINIT data unbounded

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

7.8

Base score

Exploitability score

Impact score

Verification logic

AND

product=libssh2-0 AND versionEndExcluding=1.4.3-10.el7

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=libssh2 AND version=

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=1199511
http://www.libssh2.org/adv_20150311.html
https://access.redhat.com/errata/RHSA-2015:2140

Keywords

CVE-2015-1782

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2015-1782

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures