A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.
Fixes

Solution

No solution given by the vendor.


Workaround

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2025-09-02T16:01:56.459Z

Reserved: 2023-12-18T11:40:15.080Z

Link: CVE-2023-6918

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-12-19T00:15:08.460

Modified: 2025-02-15T01:15:09.880

Link: CVE-2023-6918

cve-icon Redhat

Severity : Low

Publid Date: 2023-12-18T00:00:00Z

Links: CVE-2023-6918 - Bugzilla

cve-icon OpenCVE Enrichment

No data.