Stay Secure with the Latest Linux Advisories

security advisorysecurity updatevulnerability

Mageia 7: Urgent Fix for Libssh DoS Vulnerability in MGASA-2020-0324

The code in src/sftpserver.c did not verify the validity of certain pointers and expected them to be valid. A NULL pointer dereference could have been occurred that typically causes a crash and thus a denial-of-service (CVE-2020-16135). . MGASA-2020-0324 - Updated libssh packages fix security vulnerability Publication date: 18 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0324.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-16135 The code in src/sftpserver.c did not verify the validity of certain pointersand expected them to be valid. A NULL pointer dereference could have been occurred that typically causes a crash and thus a denial-of-service (CVE-2020-16135). References: - https://bugs.mageia.org/show_bug.cgi?id=27036 - https://lists.debian.org/debian-lts-announce/2020/07/msg00034.html - https://www.cve.org/CVERecord?id=CVE-2020-16135 SRPMS: - 7/core/libssh-0.8.9-1.1.mga7 . Mageia has released updates for its libssh packages addressing a denial-of-service vulnerability associated with pointer validation flaws. Further information is available.. libssh, security update, pointer validation, denial-of-service, Mageia. . Severity: Important. LinuxSecurity.com Team

Aug 18, 2020 •Important Mageia