CVE - CVE-2014-8132

CVE-ID
CVE-2014-8132	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/ CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1158089 CONFIRM:http://advisories.mageia.org/MGASA-2015-0014.html DEBIAN:DSA-3488 URL:http://www.debian.org/security/2016/dsa-3488 FEDORA:FEDORA-2014-17303 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147452.html FEDORA:FEDORA-2014-17324 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147464.html FEDORA:FEDORA-2014-17354 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147367.html GENTOO:GLSA-201606-12 URL:https://security.gentoo.org/glsa/201606-12 MANDRIVA:MDVSA-2015:020 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:020 SUSE:openSUSE-SU-2015:0017 URL:http://lists.opensuse.org/opensuse-updates/2015-01/msg00007.html UBUNTU:USN-2478-1 URL:http://www.ubuntu.com/usn/USN-2478-1 SECUNIA:60838 URL:http://secunia.com/advisories/60838
Assigning CNA
N/A
Date Entry Created
20141010	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20141010)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org