Back to bug 2189736
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Sandipan Roy | 2023-04-26 04:06:32 UTC | CC | security-response-team | |
| Sandipan Roy | 2023-04-26 04:09:38 UTC | Blocks | 2189609 | |
| Sandipan Roy | 2023-04-26 04:10:55 UTC | CC | akarol, ansasaki, dmetzger, gmccullo, gtanzill, jhardy, kdudka, mpitt, roliveri, simaishi, smallamp | |
| Sandipan Roy | 2023-04-26 04:15:50 UTC | Severity | high | medium |
| Priority | high | medium | ||
| Sandipan Roy | 2023-04-26 04:22:11 UTC | Depends On | 2189742, 2189740, 2189741 | |
| TEJ RATHI | 2023-04-26 06:12:42 UTC | CC | acrosby, adudiak, aoconnor, bdettelb, caswilli, dffrench, dhalasz, dkuc, drieden, fjansen, gzaronik, hbraun, hkataria, ikanias, jary, jburrell, jkoehler, jmitchel, jsherril, jtanner, jwong, kaycoth, kshier, micjohns, ngough, nweather, oezr, psegedy, rgodfrey, rravi, stcannon, sthirugn, tcarlin, tfister, tkasparek, tmeszaro, tohughes, tsasak, vkrizan, vmugicag, yguenane | |
| Sandipan Roy | 2023-05-08 04:52:03 UTC | Doc Text | A vulnerability was found in libssh. The authentication check of the connecting client can be bypassed in the function `pki_verify_data_signature` in circumstances of memory allocation problems. This may happen f.e. if not enough memory or the memory usage is limited. The problem is caused by the return value `rc`, which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible`. The value of the variable is not changed between this point and the cryptographic verification, therefore any error between them calls `goto error` returning SSH_OK. | |
| Summary | EMBARGOED CVE-2023-2283 libssh: authorization bypass in pki_verify_data_signature | CVE-2023-2283 libssh: authorization bypass in pki_verify_data_signature | ||
| Group | security, qe_staff | |||
| Sandipan Roy | 2023-05-08 04:53:10 UTC | Depends On | 2196100, 2196104, 2196102, 2196103, 2196101 | |
| RaTasha Tillery-Smith | 2023-05-08 12:41:21 UTC | Doc Text | A vulnerability was found in libssh. The authentication check of the connecting client can be bypassed in the function `pki_verify_data_signature` in circumstances of memory allocation problems. This may happen f.e. if not enough memory or the memory usage is limited. The problem is caused by the return value `rc`, which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible`. The value of the variable is not changed between this point and the cryptographic verification, therefore any error between them calls `goto error` returning SSH_OK. | A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK. |
| Red Hat Bugzilla | 2023-05-15 18:09:23 UTC | CC | drieden | |
| errata-xmlrpc | 2023-06-27 14:58:04 UTC | Link ID | Red Hat Product Errata RHSA-2023:3839 | |
| Product Security DevOps Team | 2023-06-27 19:45:50 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2023-06-27 19:45:50 UTC | |||
| Ginadavis | 2023-08-16 02:11:29 UTC | CC | mabelcannonamhere |
Back to bug 2189736