← CVE Intelligence

CVE-2023-6918

Libssh: missing checks for return values for digests PUBLISHED

Description (CNA)

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:0.9.6-14.el8 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:0.9.6-14.el8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:0.10.4-13.el9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:0.10.4-13.el9 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown

CWE

CWE-252

References

ADP enrichment

CVE

No English description supplied.