1
0
mirror of https://github.com/libssh2/libssh2.git synced 2026-01-27 00:18:12 +03:00
oss-patch 1ac1ff4438 kex.c: fix possible null pointer dereference in diffie_hellman_sha_algo() (#1508)
Notes:
PR Description:

Bug Type: Segv on unknown address
Summary: A vulnerability was discovered in the libssh2 program where an invalid memory access occurred due to dereferencing a NULL pointer. The issue was identified in the diffie_hellman_sha_algo function within kex.c.
Fix Summary: The patch resolves the issue by introducing a NULL pointer check for session->hostkey before dereferencing it. If the pointer is NULL, a corresponding error is returned, and the function exits gracefully. This fix ensures the program does not attempt to access invalid memory. The patch improves the security and stability of the program by preventing segmentation faults caused by invalid memory access.
2025-02-28 09:47:47 -08:00
2025-02-13 13:51:49 +01:00
2023-06-07 08:18:55 +02:00
2019-08-02 16:38:08 -07:00
2025-01-31 02:00:28 +01:00
2023-06-07 08:18:55 +02:00
2023-06-07 08:18:55 +02:00
2023-06-07 08:18:55 +02:00
2023-06-07 08:18:55 +02:00
2023-08-18 11:20:58 +00:00
2024-10-02 16:04:30 +02:00
2011-04-04 13:31:33 +02:00
2023-08-18 11:20:58 +00:00
2023-08-18 11:20:58 +00:00
2024-10-16 10:03:11 +02:00

libssh2 - SSH2 library

libssh2 is a library implementing the SSH2 protocol, available under the revised BSD license.

Web site

Mailing list

BSD Licensed

Web site source code

Installation instructions:

Description
libssh2 - это библиотека, реализующая протокол SSH2, доступная по пересмотренной лицензии BSD
Readme 18 MiB
Languages
C 84.8%
M4 3.6%
CMake 3.5%
Shell 2.6%
Perl 1.9%
Other 3.3%