CVE-2020-16135
Fixed in a distro release EPSS 4%
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
Products: libssh, debian_linux, fedoraproject fedora, canonical ubuntu_linux, oracle communications_cloud_native_core_policy
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libssh-devel | 0.9.4-3.el8 |
| Alpine 3.10 | libssh | 0.8.9-r1 |
| Alpine 3.11 | libssh | 0.9.4-r1 |
| Alpine 3.9 | libssh | 0.7.6-r3 |
| Debian 12 | libssh | 0.9.5-1 |
| Debian 13 | libssh | 0.9.5-1 |
| Debian 14 | libssh | 0.9.5-1 |
| Debian 9 | libssh | 0.7.3-2+deb9u3 |
| Red Hat Enterprise Linux 8 | libssh | 0:0.9.4-3.el8 |
| Red Hat Enterprise Linux 8 | libssh-config | 0:0.9.4-3.el8 |
| Red Hat Enterprise Linux 8 | libssh-debuginfo | 0:0.9.4-3.el8 |
| Red Hat Enterprise Linux 8 | libssh-debugsource | 0:0.9.4-3.el8 |
| Red Hat Enterprise Linux 8 | libssh-devel | 0:0.9.4-3.el8 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.4.9-202111172338_8.5 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.4.9-202111172338_8.5 |
| Rocky Linux 8 | libssh | 0:0.9.4-3.el8 |
| SUSE Enterprise Storage 7.1 | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Micro 5.1 | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Micro 5.2 | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | libssh | 0.9.8-3.12.2 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libssh | 0.9.8-3.12.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | libssh | 0.9.8-150200.13.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libssh | 0.9.8-3.12.2 |
| Ubuntu 16.04 LTS | libssh | 0.6.3-4.3ubuntu0.6 |
| Ubuntu 18.04 LTS | libssh | 0.8.0~20170825.94fa1e38-1ubuntu0.7 |
| Ubuntu 20.04 LTS | libssh | 0.9.3-2ubuntu2.1 |
| openSUSE Tumbleweed | libssh | 0.9.6-1.2 |