Logo
componentlibssh
Name
libssh
Version
0.11.4
Type
library
Description
Multiplatform C library implementing the SSHv2 and SSHv1 protocol
Licenses
LGPL-2.1-only
PURL
-
CPE
cpe:2.3:*:libssh:libssh:0.11.4:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
0.8.9
scarthgap
0.10.6

Patches#


#
Title
Author
Resolve
1
tests/CMakeLists.txt: do not search ssh/sshd commands on host
Yi Zhao <yi.zhao@windriver.com>
2
CompilerChecks.cmake: drop -Wunused-variable flag
Yi Zhao <yi.zhao@windriver.com>

Vulnerabilities#


Name
Analysis
Description
Exploitable
A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.