USN-6592-1: libssh vulnerabilities

Releases

• Ubuntu 23.10
• Ubuntu 23.04
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• libssh - A tiny C SSH library

Details

It was discovered that libssh incorrectly handled the ProxyCommand and the
ProxyJump features. A remote attacker could possibly use this issue to
inject malicious code into the command of the features mentioned through
the hostname parameter. (CVE-2023-6004)

It was discovered that libssh incorrectly handled return codes when
performing message digest operations. A remote attacker could possibly use
this issue to cause libssh to crash, obtain sensitive information, or
execute arbitrary code. (CVE-2023-6918)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.10

• libssh-4 - 0.10.5-3ubuntu1.2

Ubuntu 23.04

• libssh-4 - 0.10.4-2ubuntu0.3

Ubuntu 22.04

• libssh-4 - 0.9.6-2ubuntu0.22.04.3

Ubuntu 20.04

• libssh-4 - 0.9.3-2ubuntu2.5

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-6918
• CVE-2023-6004

Related notices

• USN-6592-2: libssh, libssh-doc, libssh-gcrypt-dev, libssh-dev, libssh-gcrypt-4, libssh-4