Early Access — Mondoo Vulnerability Intelligence is currently in preview.
A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.
0.10.6-2build20.10.6-30.10.6-3ubuntu10.10.6-3ubuntu1.10.10.5-3ubuntu10.10.5-3ubuntu20.10.6-20.10.6-2build10.10.6-2build20.10.6-2ubuntu0.10.10.6-3ubuntu10.11.1-10.11.1-1ubuntu0.1Exploitability
AV:NAC:HPR:LUI:NScope
S:UImpact
C:LI:LA:NCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N