CVE-2020-16135 Null dereference in n/a
A NULL pointer dereference in libssh's TFTP server implementation can cause a denial of service when buffer allocation fails.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-16135?
CVE-2020-16135 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 29 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
Weakness: CWE-476
Which versions are affected by CVE-2020-16135?
It affects 5 products.
Linux distribution packages (9)
libssh-devel AlmaLinux:8 | All versions | 0.9.4-3.el8 |
libssh-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:0.9.4-3.el8 |
libssh-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:0.9.4-3.el8 |
libssh-devel Red Hat:enterprise_linux:8::appstream | All versions | 0:0.9.4-3.el8 |
libssh Red Hat:enterprise_linux:8::baseos | All versions | 0:0.9.4-3.el8 |
libssh-config Red Hat:enterprise_linux:8::baseos | All versions | 0:0.9.4-3.el8 |
libssh-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.9.4-3.el8 |
libssh-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:0.9.4-3.el8 |
libssh Rocky Linux:8 | All versions | 0:0.9.4-3.el8 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Libssh Libssh, Oracle Communications Cloud Native Core Policy.
How do I fix CVE-2020-16135?
Upgrade to a fixed version.
Is CVE-2020-16135 being exploited?
There is no known exploitation of CVE-2020-16135 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2020-16135, ALSA-2021:4387, DEBIAN-CVE-2020-16135, DLA-2303-1, GHSA-9j7p-fvvp-cp57, MGASA-2020-0324 and 5 more.