CVE-2012-4561 in libssh

Summary

The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers cause a denial of service (crash) via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 08/21/2012
• Disclosure: 11/30/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-63106
• CPE: ready
• CWE: CWE-404 (Confirmed)
• CVSS: 5.3
• EPSS: 0.03707
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4561
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4561
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4561/