Flaw in libssh AES-CTR Ciphers Affects System Availability

CVE-2020-1730

Summary

A flaw exists in libssh where AES-CTR or DES ciphers mishandling can lead to a server or client crash if a connection isn't fully initialized. This occurs during the cipher cleanup process upon connection closure. This vulnerability primarily threatens system availability, which could disrupt services relying on stable connectivity.

References