Red Hat libssh
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1730 | libssh versions before 0.8.9 ; libssh versions before 0.9.4 | A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The ser | MEDIUM 5.3 | 3.1 % | ||
| CVE-2019-14889 | All libssh versions before 0.9.3 ; All libssh versions before 0.8.8 | A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects t | HIGH 8.8 | 3.2 % |