CVE-2023-6918

Summary

CVE-2023-6918 is a vulnerability affecting the libssh library's message digest (MD) operations in various crypto backends. The abstract layer for these operations does not adequately check return values, leading to potential low-memory situations, crashes, NULL dereferences, or usage of uninitialized memory as input for the Key Derivation Function (KDF). Consequently, non-matching keys may result in decryption or integrity failures, ultimately terminating the connection.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.