NULL Pointer Dereference in Libssh During Re-Keying Process Impacting Multiple Vendors

CVE-2023-1667

What is CVE-2023-1667?

A NULL pointer dereference vulnerability has been identified in libssh that could be exploited during the re-keying process through algorithm guessing. This flaw allows an authenticated client to potentially trigger a denial of service, disrupting service availability. It is crucial for system administrators using affected versions to implement updates and mitigate potential risks associated with this vulnerability.

References