[ssh_x509] upcoming release 13.6

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Fri Feb 3 10:14:26 EET 2023


Hello,

With minimisation of memory leak when is activated key exchange, cipher or algorithm compatibility PKIX-SSH 13.5 introduces double-free memory fault.
It is not exploitable on server side as freed pointer is duplicate of configuration settings and source is not used any more.
Client could be impacted but when server is crafted specialty.

Regards,
Roumen Petrov

P.S. correction - https://gitlab.com/secsh/pkixssh/-/commit/41e983695d76ac20b8b254759994bd60fd1433ef



More information about the ssh_x509 mailing list