Updated libssh2 packages fix security vulnerability :

Mariusz Ziulek reported that libssh2, a SSH2 client-side library, was reading and using the SSH_MSG_KEXINIT packet without doing sufficient range checks when negotiating a new SSH session with a remote server.
A malicious attacker could man in the middle a real server and cause a client using the libssh2 library to crash (denial of service) or otherwise read and use unintended memory areas in this process (CVE-2015-1782).

Update :

Packages were misssing for Mandriva Business Server 1 with the MDVSA-2015:148 advisory which are now being provided.

Mariusz Ziulek reported that libssh2, a SSH2 client-side library, was reading and using the SSH_MSG_KEXINIT packet without doing sufficient range checks when negotiating a new SSH session with a remote server.
A malicious attacker could man in the middle a real server and cause a client using the libssh2 library to crash (denial of service) or otherwise read and use unintended memory areas in this process.

libssh2_org was updated to version 1.5.0 to fix bugs and a security issue.

Changes in 1.5.0: Added Windows Cryptography API: Next Generation based backend

Bug fixes :

  - Security Advisory: Using `SSH_MSG_KEXINIT` data     unbounded, CVE-2015-1782

  - missing _libssh2_error in _libssh2_channel_write

  - knownhost: Fix DSS keys being detected as unknown.

  - knownhost: Restore behaviour of     `libssh2_knownhost_writeline` with short buffer.

  - libssh2.h: on Windows, a socket is of type SOCKET, not     int

  - libssh2_priv.h: a 1 bit bit-field should be unsigned

  - windows build: do not export externals from static     library

  - Fixed two potential use-after-frees of the payload     buffer

  - Fixed a few memory leaks in error paths

  - userauth: Fixed an attempt to free from stack on error

  - agent_list_identities: Fixed memory leak on OOM

  - knownhosts: Abort if the hosts buffer is too small

  - sftp_close_handle: ensure the handle is always closed

  - channel_close: Close the channel even in the case of     errors

  - docs: added missing libssh2_session_handshake.3 file

  - docs: fixed a bunch of typos

  - userauth_password: pass on the underlying error code

  - _libssh2_channel_forward_cancel: accessed struct after     free

  - _libssh2_packet_add: avoid using uninitialized memory

  - _libssh2_channel_forward_cancel: avoid memory leaks on     error

  - _libssh2_channel_write: client spins on write when     window full

  - windows build: fix build errors

  - publickey_packet_receive: avoid junk in returned     pointers

  - channel_receive_window_adjust: store windows size always

  - userauth_hostbased_fromfile: zero assign to avoid     uninitialized use

  - configure: change LIBS not LDFLAGS when checking for     libs

  - agent_connect_unix: make sure there's a trailing zero

  - MinGW build: Fixed redefine warnings.

  - sftpdir.c: added authentication method detection.

  - Watcom build: added support for WinCNG build.

  - configure.ac: replace AM_CONFIG_HEADER with     AC_CONFIG_HEADERS

  - sftp_statvfs: fix for servers not supporting statfvs     extension

  - knownhost.c: use LIBSSH2_FREE macro instead of free

  - Fixed compilation using mingw-w64

  - knownhost.c: fixed that 'key_type_len' may be used     uninitialized

  - configure: Display individual crypto backends on     separate lines

  - examples on Windows: check for WSAStartup return code

  - examples on Windows: check for socket return code

  - agent.c: check return code of MapViewOfFile

  - kex.c: fix possible NULL pointer de-reference with     session->kex

  - packet.c: fix possible NULL pointer de-reference within     listen_state

  - tests on Windows: check for WSAStartup return code

  - userauth.c: improve readability and clarity of for-loops

  - examples on Windows: use native SOCKET-type instead of     int

  - packet.c: i < 256 was always true and i would overflow     to 0

  - kex.c: make sure mlist is not set to NULL

  - session.c: check return value of session_nonblock in     debug mode

  - session.c: check return value of session_nonblock during     startup

  - userauth.c: make sure that sp_len is positive and avoid     overflows

  - knownhost.c: fix use of uninitialized argument variable     wrote

  - openssl: initialise the digest context before calling     EVP_DigestInit()

  - libssh2_agent_init: init ->fd to LIBSSH2_INVALID_SOCKET

  - configure.ac: Add zlib to Requires.private in libssh2.pc     if using zlib

  - configure.ac: Rework crypto library detection

  - configure.ac: Reorder --with-* options in --help output

  - configure.ac: Call zlib zlib and not libz in text but     keep option names

  - Fix non-autotools builds: Always define the     LIBSSH2_OPENSSL CPP macro

  - sftp: seek: Don't flush buffers on same offset

  - sftp: statvfs: Along error path, reset the correct     'state' variable.

  - sftp: Add support for fsync (OpenSSH extension).

  - _libssh2_channel_read: fix data drop when out of window

  - comp_method_zlib_decomp: Improve buffer growing     algorithm

  - _libssh2_channel_read: Honour window_size_initial

  - window_size: redid window handling for flow control     reasons

  - knownhosts: handle unknown key types

This update, to the current upstream release version, contains numerous bug fixes and enhancements as described in the RELEASE-NOTES file.

These include a security fix for CVE-2015-1782 :

A malicious attacker could man in the middle a real server and cause libssh2-using clients to crash (denial of service) or otherwise read and use completely unintended memory areas in this process. There are no known exploits of this flaw at this time.

See http://www.libssh2.org/adv_20150311.html for further details.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mariusz Ziulek reports :

A malicious attacker could man in the middle a real server and cause libssh2 using clients to crash (denial of service) or otherwise read and use completely unintended memory areas in this process.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2140 advisory.

    - check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A type confusion issue was found in the way libssh2     generated ephemeral secrets for the     diffie-hellman-group1 and diffie-hellman-group14 key     exchange methods. This would cause an SSHv2     Diffie-Hellman handshake to use significantly less     secure random parameters.(CVE-2016-0787)

  - A flaw was found in the way the kex_agree_methods()     function of libssh2 performed a key exchange when     negotiating a new SSH session. A man-in-the-middle     attacker could use a crafted SSH_MSG_KEXINIT packet to     crash a connecting libssh2 client.(CVE-2015-1782)

  - An integer overflow flaw which could lead to an out of     bounds write was discovered in libssh2 in the way     SSH_MSG_CHANNEL_REQUEST packets with an exit signal are     parsed. A remote attacker who compromises a SSH server     may be able to execute code on the client system when a     user connects to the server.(CVE-2019-3857)

  - An out of bounds read flaw was discovered in libssh2     before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets     with an exit status message and no payload are parsed.
    A remote attacker who compromises a SSH server may be     able to cause a Denial of Service or read data in the     client memory.(CVE-2019-3862)

  - An integer overflow flaw, which could lead to an out of     bounds write, was discovered in libssh2 before 1.8.1 in     the way keyboard prompt requests are parsed. A remote     attacker who compromises a SSH server may be able to     execute code on the client system when a user connects     to the server.(CVE-2019-3856)

  - A flaw was found in libssh2 before 1.8.1. A server     could send a multiple keyboard interactive response     messages whose total length are greater than unsigned     char max characters. This value is used as an index to     copy memory causing in an out of bounds memory write     error.(CVE-2019-3863)

  - An integer overflow flaw which could lead to an out of     bounds write was discovered in libssh2 before 1.8.1 in     the way packets are read from the server. A remote     attacker who compromises a SSH server may be able to     execute code on the client system when a user connects     to the server.(CVE-2019-3855)

  - An out of bounds read flaw was discovered in libssh2     before 1.8.1 when a specially crafted SFTP packet is     received from the server. A remote attacker who     compromises a SSH server may be able to cause a Denial     of Service or read data in the client     memory.(CVE-2019-3858)

  - An out of bounds read flaw was discovered in libssh2     before 1.8.1 in the _libssh2_packet_require and
    _libssh2_packet_requirev functions. A remote attacker     who compromises a SSH server may be able to cause a     Denial of Service or read data in the client     memory.(CVE-2019-3859)

  - An out of bounds read flaw was discovered in libssh2     before 1.8.1 in the way SFTP packets with empty     payloads are parsed. A remote attacker who compromises     a SSH server may be able to cause a Denial of Service     or read data in the client memory.(CVE-2019-3860)

  - An out of bounds read flaw was discovered in libssh2     before 1.8.1 in the way SSH packets with a padding     length value greater than the packet length are parsed.
    A remote attacker who compromises a SSH server may be     able to cause a Denial of Service or read data in the     client memory.(CVE-2019-3861)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
82401	Mandriva Linux Security Advisory : libssh2 (MDVSA-2015:148-1)	Nessus	Mandriva Local Security Checks	2015/3/30	2021/1/14	medium
81760	Debian DSA-3182-1 : libssh2 - security update	Nessus	Debian Local Security Checks	2015/3/12	2021/1/11	medium
81946	openSUSE Security Update : libssh2_org (openSUSE-2015-242)	Nessus	SuSE Local Security Checks	2015/3/19	2021/1/19	medium
82433	Fedora 20 : libssh2-1.5.0-1.fc20 (2015-3791)	Nessus	Fedora Local Security Checks	2015/3/31	2021/1/11	medium
86080	FreeBSD : libssh2 -- denial of service vulnerability (9770d6ac-614d-11e5-b379-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	2015/9/23	2021/1/6	medium
87024	Oracle Linux 7 : libssh2 (ELSA-2015-2140)	Nessus	Oracle Linux Local Security Checks	2015/11/24	2025/4/29	critical
124932	EulerOS Virtualization 3.0.1.0 : libssh2 (EulerOS-SA-2019-1429)	Nessus	Huawei Local Security Checks	2019/5/14	2022/5/20	critical

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

critical

critical