Wind River Support Network


LIN6-9572 : Security Advisory - libssh2 - CVE-2015-1782

Created: Mar 15, 2015    Updated: Dec 3, 2018
Resolved Date: Mar 16, 2015
Previous ID: LIN4-32344
Found In Version: 6.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


Could you provide us the patch for CVE-2015-1782.

A vulnerability has been reported in libssh2, which can be exploited by malicious people to cause a DoS (Denial of Service) or expose sensitive information or manipulate data.

The vulnerability is caused due to an error in the "kex_agree_methods()" function (src/kex.c) when handling strings, which can be exploited to cause an out-of-bounds read memory access and a crash via a specially crafted SSH_MSG_KEXINIT packet.

Other Downloads

Live chat