Vulnerability · Published Dec 18, 2023 · Assigned by redhat
CVE-2023-6918Libssh: missing checks for return values for digests
Low 3.7
In plain English
A low-severity security flaw in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libssh | 0.9.6-14.el8 | ALSA-2024:3233 |
| AlmaLinux:9 | libssh | 0.10.4-13.el9 | ALSA-2024:2504 |
| AlmaLinux:8 | libssh-config | 0.9.6-14.el8 | ALSA-2024:3233 |
| AlmaLinux:9 | libssh-config | 0.10.4-13.el9 | ALSA-2024:2504 |
| AlmaLinux:8 | libssh-devel | 0.9.6-14.el8 | ALSA-2024:3233 |
| AlmaLinux:9 | libssh-devel | 0.10.4-13.el9 | ALSA-2024:2504 |
| Alpine:v3.20 | libssh | 0.10.6-r0 | ALPINE-CVE-2023-6918 |
| Alpine:v3.21 | libssh | 0.10.6-r0 | ALPINE-CVE-2023-6918 |
| Alpine:v3.22 | libssh | 0.10.6-r0 | ALPINE-CVE-2023-6918 |
| Alpine:v3.23 | libssh | 0.10.6-r0 | ALPINE-CVE-2023-6918 |
| Alpine:v3.24 | libssh | 0.10.6-r0 | ALPINE-CVE-2023-6918 |
| Debian:12 | libssh | 0.10.6-0+deb12u1 | DEBIAN-CVE-2023-6918 |
| Debian:12 | libssh | 0.10.6-0+deb12u1 | DSA-5591-1 |
| Debian:13 | libssh | 0.10.6-1 | DEBIAN-CVE-2023-6918 |
| Debian:14 | libssh | 0.10.6-1 | DEBIAN-CVE-2023-6918 |
| Rocky Linux:8 | libssh | 0:0.9.6-14.el8 | RLSA-2024:3233 |
| Rocky Linux:9 | libssh | 0:0.10.4-13.el9 | RLSA-2024:2504 |
| Ubuntu:22.04:LTS | libssh | 0.9.6-2ubuntu0.22.04.3 | USN-6592-1 |
| Ubuntu:22.04:LTS | libssh | 0.9.6-2ubuntu0.22.04.3 | UBUNTU-CVE-2023-6918 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-252 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- RHSA-2024:2504 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3233 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-6918 vdb-entry, x_refsource_REDHAT
- RHBZ#2254997 issue-tracking, x_refsource_REDHAT
- https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/
- https://www.libssh.org/security/advisories/CVE-2023-6918.txt
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/ x_transferred
- https://security.netapp.com/advisory/ntap-20250214-0009/