Description
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 alpine v3.10 | | =0.4.5-r0 || =0.4.6-r0 || =0.4.8-r0 || =0.5.0-r0 || =0.5.1-r0 || =0.5.2-r0 || =0.5.2-r1 || =0.5.3-r0 || =0.5.4-r0 || =0.5.5-r0 || =0.6.0-r0 || =0.6.3-r0 || =0.6.4-r0 || =0.6.5-r0 || =0.7.0-r0 || =0.7.1-r0 || =0.7.2-r0 || =0.7.3-r0 || =0.7.3-r1 || =0.7.4-r0 || =0.7.5-r0 || =0.7.5-r1 || =0.7.5-r2 || =0.7.5-r3 || =0.7.6-r0 || =0.7.6-r1 || =0.8.8-r0 || =0.8.9-r0 || >=0 <0.8.9-r1 | 0.8.9-r1 |
 alpine v3.11 | | =0.4.5-r0 || =0.4.6-r0 || =0.4.8-r0 || =0.5.0-r0 || =0.5.1-r0 || =0.5.2-r0 || =0.5.2-r1 || =0.5.3-r0 || =0.5.4-r0 || =0.5.5-r0 || =0.6.0-r0 || =0.6.3-r0 || =0.6.4-r0 || =0.6.5-r0 || =0.7.0-r0 || =0.7.1-r0 || =0.7.2-r0 || =0.7.3-r0 || =0.7.3-r1 || =0.7.4-r0 || =0.7.5-r0 || =0.7.5-r1 || =0.7.5-r2 || =0.7.5-r3 || =0.7.6-r0 || =0.7.6-r1 || =0.8.7-r0 || =0.9.0-r0 || =0.9.2-r0 || =0.9.3-r0 || =0.9.4-r0 || >=0 <0.9.4-r1 | 0.9.4-r1 |
 debian 14 | | | 0.9.5-1 |
 alpine v3.9 | | =0.4.5-r0 || =0.4.6-r0 || =0.4.8-r0 || =0.5.0-r0 || =0.5.1-r0 || =0.5.2-r0 || =0.5.2-r1 || =0.5.3-r0 || =0.5.4-r0 || =0.5.5-r0 || =0.6.0-r0 || =0.6.3-r0 || =0.6.4-r0 || =0.6.5-r0 || =0.7.0-r0 || =0.7.1-r0 || =0.7.2-r0 || =0.7.3-r0 || =0.7.3-r1 || =0.7.4-r0 || =0.7.5-r0 || =0.7.5-r1 || =0.7.5-r2 || =0.7.5-r3 || =0.7.6-r0 || =0.7.6-r1 || =0.7.6-r2 || >=0 <0.7.6-r3 | 0.7.6-r3 |
 debian 11 | | | 0.9.5-1 |
 debian 12 | | | 0.9.5-1 |
 debian 13 | | | 0.9.5-1 |
 rpm rhel8 | | | 0:0.9.4-3.el8 |
 rpm rhel7 | | - | - |