1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6592-1

[USN-6592-1] libssh vulnerabilities

Severity Medium
Affected Packages 20
CVEs 2
Info Packages Vulnerabilities

Several security issues were fixed in libssh.

It was discovered that libssh incorrectly handled the ProxyCommand and the
ProxyJump features. A remote attacker could possibly use this issue to
inject malicious code into the command of the features mentioned through
the hostname parameter. (CVE-2023-6004)

It was discovered that libssh incorrectly handled return codes when
performing message digest operations. A remote attacker could possibly use
this issue to cause libssh to crash, obtain sensitive information, or
execute arbitrary code. (CVE-2023-6918)

Package Affected Version
pkg:deb/ubuntu/libssh-gcrypt-dev?distro=mantic < 0.10.5-3ubuntu1.2
pkg:deb/ubuntu/libssh-gcrypt-dev?distro=lunar < 0.10.4-2ubuntu0.3
pkg:deb/ubuntu/libssh-gcrypt-dev?distro=jammy < 0.9.6-2ubuntu0.22.04.3
pkg:deb/ubuntu/libssh-gcrypt-dev?distro=focal < 0.9.3-2ubuntu2.5
pkg:deb/ubuntu/libssh-gcrypt-4?distro=mantic < 0.10.5-3ubuntu1.2
pkg:deb/ubuntu/libssh-gcrypt-4?distro=lunar < 0.10.4-2ubuntu0.3
pkg:deb/ubuntu/libssh-gcrypt-4?distro=jammy < 0.9.6-2ubuntu0.22.04.3
pkg:deb/ubuntu/libssh-gcrypt-4?distro=focal < 0.9.3-2ubuntu2.5
pkg:deb/ubuntu/libssh-doc?distro=mantic < 0.10.5-3ubuntu1.2
pkg:deb/ubuntu/libssh-doc?distro=lunar < 0.10.4-2ubuntu0.3
pkg:deb/ubuntu/libssh-doc?distro=jammy < 0.9.6-2ubuntu0.22.04.3
pkg:deb/ubuntu/libssh-doc?distro=focal < 0.9.3-2ubuntu2.5
pkg:deb/ubuntu/libssh-dev?distro=mantic < 0.10.5-3ubuntu1.2
pkg:deb/ubuntu/libssh-dev?distro=lunar < 0.10.4-2ubuntu0.3
pkg:deb/ubuntu/libssh-dev?distro=jammy < 0.9.6-2ubuntu0.22.04.3
pkg:deb/ubuntu/libssh-dev?distro=focal < 0.9.3-2ubuntu2.5
pkg:deb/ubuntu/libssh-4?distro=mantic < 0.10.5-3ubuntu1.2
pkg:deb/ubuntu/libssh-4?distro=lunar < 0.10.4-2ubuntu0.3
pkg:deb/ubuntu/libssh-4?distro=jammy < 0.9.6-2ubuntu0.22.04.3
pkg:deb/ubuntu/libssh-4?distro=focal < 0.9.3-2ubuntu2.5
ID
USN-6592-1
Severity
medium
Severity from
CVE-2023-6918
URL
https://ubuntu.com/security/notices/USN-6592-1
Published
2024-01-22T13:05:30
(8 months ago)
Modified
2024-01-22T13:05:30
(8 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/libssh-gcrypt-dev?distro=mantic ubuntu libssh-gcrypt-dev < 0.10.5-3ubuntu1.2 mantic
Affected pkg:deb/ubuntu/libssh-gcrypt-dev?distro=lunar ubuntu libssh-gcrypt-dev < 0.10.4-2ubuntu0.3 lunar
Affected pkg:deb/ubuntu/libssh-gcrypt-dev?distro=jammy ubuntu libssh-gcrypt-dev < 0.9.6-2ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/libssh-gcrypt-dev?distro=focal ubuntu libssh-gcrypt-dev < 0.9.3-2ubuntu2.5 focal
Affected pkg:deb/ubuntu/libssh-gcrypt-4?distro=mantic ubuntu libssh-gcrypt-4 < 0.10.5-3ubuntu1.2 mantic
Affected pkg:deb/ubuntu/libssh-gcrypt-4?distro=lunar ubuntu libssh-gcrypt-4 < 0.10.4-2ubuntu0.3 lunar
Affected pkg:deb/ubuntu/libssh-gcrypt-4?distro=jammy ubuntu libssh-gcrypt-4 < 0.9.6-2ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/libssh-gcrypt-4?distro=focal ubuntu libssh-gcrypt-4 < 0.9.3-2ubuntu2.5 focal
Affected pkg:deb/ubuntu/libssh-doc?distro=mantic ubuntu libssh-doc < 0.10.5-3ubuntu1.2 mantic
Affected pkg:deb/ubuntu/libssh-doc?distro=lunar ubuntu libssh-doc < 0.10.4-2ubuntu0.3 lunar
Affected pkg:deb/ubuntu/libssh-doc?distro=jammy ubuntu libssh-doc < 0.9.6-2ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/libssh-doc?distro=focal ubuntu libssh-doc < 0.9.3-2ubuntu2.5 focal
Affected pkg:deb/ubuntu/libssh-dev?distro=mantic ubuntu libssh-dev < 0.10.5-3ubuntu1.2 mantic
Affected pkg:deb/ubuntu/libssh-dev?distro=lunar ubuntu libssh-dev < 0.10.4-2ubuntu0.3 lunar
Affected pkg:deb/ubuntu/libssh-dev?distro=jammy ubuntu libssh-dev < 0.9.6-2ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/libssh-dev?distro=focal ubuntu libssh-dev < 0.9.3-2ubuntu2.5 focal
Affected pkg:deb/ubuntu/libssh-4?distro=mantic ubuntu libssh-4 < 0.10.5-3ubuntu1.2 mantic
Affected pkg:deb/ubuntu/libssh-4?distro=lunar ubuntu libssh-4 < 0.10.4-2ubuntu0.3 lunar
Affected pkg:deb/ubuntu/libssh-4?distro=jammy ubuntu libssh-4 < 0.9.6-2ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/libssh-4?distro=focal ubuntu libssh-4 < 0.9.3-2ubuntu2.5 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date