lib/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2025-12-11 03:42:35 +03:00
Code Activity

CVE-2023-1667:packet: Do not allow servers to initiate handshake

Browse Source 
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Norbert Pocs <npocs@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2023-03-14 11:35:43 +01:00
committed by Andreas Schneider
parent fa902a37ae
commit 4fb6bccf22
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/packet.c
View File

@@ -366,6 +366,11 @@ static enum ssh_packet_filter_result_e ssh_packet_incoming_filter(ssh_session se
* - session->dh_handshake_state = DH_STATE_NEWKEYS_SENT * - session->dh_handshake_state = DH_STATE_NEWKEYS_SENT
* */ * */
if (!session->server) {
rc = SSH_PACKET_DENIED;
break;
}
if (session->session_state != SSH_SESSION_STATE_DH) { if (session->session_state != SSH_SESSION_STATE_DH) {
rc = SSH_PACKET_DENIED; rc = SSH_PACKET_DENIED;
break; break;