CVE-2013-0176

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libssh是一个用于访问SSH服务的C语言开发包，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。 libssh 0.5.4之前版本中的publickey_from_privatekey函数中存在漏洞。在协商过程中没有算法与之匹配的情况下，通过“Client: Diffie-Hellman Key Exchange Init”数据包，远程攻击者可利用该漏洞导致拒绝服务（空指针引用并崩溃）。

CVE-2013-0176 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. libssh是一个用于访问SSH服务的C语言开发包，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。 libssh 0.5.4之前版本中的publickey_from_privatekey函数中存在漏洞。在协商过程中没有算法与之匹配的情况下，通过“Client: Diffie-Hellman Key Exchange Init”数据包，远程 CVE-2013-0176 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2013-0176

I. Basic Information for CVE-2013-0176

Affected Products

II. Public POCs for CVE-2013-0176

III. Intelligence Information for CVE-2013-0176

Vendor Advisories for CVE-2013-0176 (3)

• 🔗 http://secunia.com/advisories/51982 third-party-advisory x_refsource_SECUNIA
• 🔗 http://www.ubuntu.com/usn/USN-1707-1 vendor-advisory x_refsource_UBUNTU
• 🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/81595 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2013-0176 (2)

• 🔗 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html vendor-advisory x_refsource_FEDORA
• 🔗 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html vendor-advisory x_refsource_FEDORA

Other References for CVE-2013-0176 (1)

• 🔗 http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/ x_refsource_CONFIRM

• https://www.cve.org/CVERecord?id=CVE-2013-0176

Same Patch Batch · n/a · 2013-02-05 · 10 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2013-0176