Wind River Support Network


LIN7-3152 : Security Advisory - libssh2 - CVE-2015-1782

Created: Mar 15, 2015    Updated: Sep 8, 2018
Resolved Date: Mar 16, 2015
Previous ID: LIN4-32345
Found In Version: 7.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace


Could you provide us the patch for CVE-2015-1782.

A vulnerability has been reported in libssh2, which can be exploited by malicious people to cause a DoS (Denial of Service) or expose sensitive information or manipulate data.

The vulnerability is caused due to an error in the "kex_agree_methods()" function (src/kex.c) when handling strings, which can be exploited to cause an out-of-bounds read memory access and a crash via a specially crafted SSH_MSG_KEXINIT packet.

Other Downloads


Live chat