NULL Pointer Dereference in libssh Affects Multiple Distributions
CVE-2020-16135

5.9MEDIUM

Key Information:

Vendor: Libssh
Status: Libssh
Vendor: CVE Published:; 29 July 2020

What is CVE-2020-16135?

libssh version 0.9.4 is susceptible to a NULL pointer dereference vulnerability in the tftpserver.c component. This issue occurs when the function ssh_buffer_new returns NULL, leading to potential application crashes or unexpected behavior. Users of libssh should ensure they update to a patched version to mitigate the risks associated with this vulnerability.