NVD

Id
36543  
Name
CVE-2013-0176  
Description
The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-02-05  
Modified Date
2013-02-07  
Seq
2013-0176  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186657 36543 CVE-2013-0176 FEDORA-2013-1422  View
186658 36543 CVE-2013-0176 FEDORA-2013-1407  View
186659 36543 CVE-2013-0176 http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/  View
186660 36543 CVE-2013-0176 USN-1707-1  View
186661 36543 CVE-2013-0176 libssh-publickeyfromprivatekey-dos(81595)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19854 JVNDB-2013-001429 libssh の publickey_from_privatekey 関数におけるサービス運用妨害 (DoS) の脆弱性 libssh の publickey_from_privatekey 関数は、ネゴシエーションにおいて、アルゴリズムが一致しない場合、サービス運用妨害 (Null ポインタデリファレンスおよびクラッシュ) 状態となる脆弱性が存在します。 CVE-2013-0176 60118 CVE-2013-0176 36543 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001429.html 2013-01-13 2013-02-18 View