VDB
ALSA-2024%3A0628
ALSA-2024%3A0628
PUBLISHED
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | libssh | 0, 0 |
| AlmaLinux:8 | libssh-devel | 0, 0 |
| AlmaLinux:8 | libssh-config | 0, 0 |
Timeline
- Jan 31, 2024 CVE Published
- Feb 1, 2024 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 12, 2026 Distribution Patch
- Mar 12, 2026 Security Advisory
References
- https://bugzilla.redhat.com/2254210 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2024-0628.html vendor-advisory
- https://access.redhat.com/errata/RHSA-2024:0628 advisory
- https://access.redhat.com/security/cve/CVE-2023-48795 report