CVE-2021-3634
Summary
| CVE | CVE-2021-3634 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-08-31 17:15:00 UTC |
|---|
| Updated | 2023-12-22 10:15:00 UTC |
|---|
| Description | A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| CVE-2021-3634 libssh Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| [SECURITY] Fedora 35 Update: libssh-0.9.6-1.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Debian -- Security Information -- DSA-4965-1 libssh |
DEBIAN |
www.debian.org |
|
| [SECURITY] Fedora 35 Update: libssh-0.9.6-1.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| 1978810 – (CVE-2021-3634) CVE-2021-3634 libssh: possible heap-based buffer overflow when rekeying |
MISC |
bugzilla.redhat.com |
|
| [SECURITY] Fedora 34 Update: libssh-0.9.6-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Oracle Critical Patch Update Advisory - January 2022 |
MISC |
www.oracle.com |
|
| [SECURITY] Fedora 33 Update: libssh-0.9.6-1.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 33 Update: libssh-0.9.6-1.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| libssh: Multiple Vulnerabilities (GLSA 202312-05) — Gentoo security |
|
security.gentoo.org |
|
| [SECURITY] Fedora 34 Update: libssh-0.9.6-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159812 Oracle Enterprise Linux Security Update for libssh (ELSA-2022-2031)
- 178780 Debian Security Update for libssh (DSA 4965-1)
- 183967 Debian Security Update for libssh (CVE-2021-3634)
- 198472 Ubuntu Security Notification for libssh Vulnerability (USN-5053-1)
- 240324 Red Hat Update for libssh security (RHSA-2022:2031)
- 281933 Fedora Security Update for libssh (FEDORA-2021-288925ac19)
- 281965 Fedora Security Update for libssh (FEDORA-2021-f2a020a065)
- 501876 Alpine Linux Security Update for libssh
- 670827 EulerOS Security Update for libssh (EulerOS-SA-2021-2716)
- 670945 EulerOS Security Update for libssh (EulerOS-SA-2021-2691)
- 690031 Free Berkeley Software Distribution (FreeBSD) Security Update for libssh (57b1ee25-1a7c-11ec-9376-0800272221cc)
- 710806 Gentoo Linux libssh Multiple Vulnerabilities (GLSA 202312-05)
- 755806 SUSE Enterprise Linux Security Update for libssh (SUSE-SU-2024:0539-1)
- 901107 Common Base Linux Mariner (CBL-Mariner) Security Update for libssh (7274)
- 940503 AlmaLinux Security Update for libssh (ALSA-2022:2031)
- 960135 Rocky Linux Security Update for libssh (RLSA-2022:2031)
