Vulnerability in Libssh

CVE-2012-4562

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.

EPSS: 0.128 (95.9th percentile) — read the EPSS interpretation.

Affected products

  • Libssh — versions 0.4.7, 0.4.8, 0.5.0
  • N/a — versions n/a

Weakness classification (CWE)

References