CVE-2012-4560 Memory corruption in n/a
Remote attackers can cause denial of service or execute arbitrary code via buffer overflows in the libssh library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-4560?
CVE-2012-4560 is a high-severity memory corruption vulnerability in n/a, published on 30 Nov 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
Weakness: CWE-119
Which versions are affected by CVE-2012-4560?
It affects 1 product.
Products include Libssh Libssh.
How do I fix CVE-2012-4560?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2012-4560 being exploited?
There is no known exploitation of CVE-2012-4560 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2026-59851 Libssh: libssh: authentication bypass via missing gssapi principal check
- CVE-2025-5987 Libssh: invalid return code for chacha20 poly1305 with openssl backend
- CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
- CVE-2012-4562 Integer overflow in n/a
- CVE-2012-6063 Use after free in n/a
Sources
Also known as DEBIAN-CVE-2012-4560, GHSA-q6mh-jmqc-qqqq.