libssh

Licenses: LGPL-2.1

License

[0.10.6];

[0.11.1];

[0.11.2];

Known vulnerabilities in the libssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Incorrect Authorization	[0,)
L Infinite loop	[0,)
H Improper Verification of Cryptographic Signature	[0,)
L Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	[0,)
H Memory Allocation with Excessive Size Value	[0,)
M Denial of Service (DoS)	[0,)
M Use After Free	[0,)
M Out-of-bounds Read	[0,)
M Denial of Service (DoS)	[0,)
H Infinite loop	[0,)
M Stack-based Buffer Overflow	[0,)
M Out-of-bounds Read	[,0.11.4)
M Allocation of Resources Without Limits or Throttling	[,0.11.4)
L Directory Traversal	[,0.11.4)
L Allocation of Resources Without Limits or Throttling	[,0.11.4)
M Buffer Underwrite (Buffer Underflow)	[,0.11.4)
L NULL Pointer Dereference	[,0.11.4)
H Uncontrolled Search Path Element	[,0.11.4)
L Missing Release of Memory after Effective Lifetime	[0.10.6,0.11.3)
M Integer Overflow or Wraparound	[0.11.1,0.11.2)
M NULL Pointer Dereference	[0.10.6,0.11.3)
M Out-of-bounds Read	[,0.11.2)
L Double Free	[0.10.6,0.11.2)
L Use of a Broken or Risky Cryptographic Algorithm	[,0.11.2)
L Use After Free	[,0.11.2)
L Out-of-bounds Write	[,0.11.2)
L Return of Wrong Status Code	[,0.11.2)
L Denial of Service (DoS)	[,0.11.1)