CVEvulnerability

CVE-2012-4561

5.0 MEDIUM Published 2012-11-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service (crash) via unspecified vectors.

Affected configurations

• libssh libssh (<= 0.5.2) • libssh libssh 0.4.7 • libssh libssh 0.4.8 • libssh libssh 0.5.0 • libssh libssh 0.5.1

References