OSV-2024-985 Heap-double-free in libssh2_default_free
A heap double-free vulnerability in libssh2 allows attackers to cause a denial of service via crafted network traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is OSV-2024-985?
OSV-2024-985 is an use after free vulnerability in libssh2, published on 16 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69362
Crash type: Heap-double-free
Crash state:
libssh2_default_free
session_free
libssh2_session_free
Which versions are affected by OSV-2024-985?
1 open source package ship an affected version, including libssh2.
| Package | Affected | Fixed in |
|---|---|---|
libssh2 OSS-Fuzz | All versions | None |
How do I fix OSV-2024-985?
No fix has been published for OSV-2024-985 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is OSV-2024-985 being exploited?
There is no known exploitation of OSV-2024-985 in the wild and no public exploit code.