BSD PortsVulnerable: version 0.12.2 is affected by 19 known vulnerabilities. See below.
security/libssh 0.12.2 NetBSD
SSHv2+v1 protocol library
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
a840894efb- License
- 2-clause-bsd
- Categories
- security
- Package size
- 238.0 KiB, 775.5 KiB installed
Description
libssh is a multiplatform C library implementing the SSHv2 and SSHv1 protocol on client and server side. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote applications.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | security/libssh | 0.12.2 |
| FreeBSD | security/libssh | 0.12.2 |
| OpenBSD | security/libssh | 0.12.2 |
| DragonFly | security/libssh | 0.11.2 |
| MidnightBSD | security/libssh | 0.10.6 |
| HardenedBSD | security/libssh | 0.12.2 |
| GhostBSD | security/libssh | 0.12.2 |
| OPNsense | security/libssh | 0.12.0_1 |
Install
Binary package:
pkgin install libsshFrom pkgsrc:
cd /usr/pkgsrc/security/libssh && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 0.12.2 |
| NetBSD 10.1 aarch64 | 0.11.5 |
| SmartOS / illumos x86_64 | 0.12.2 |
| macOS 15 arm64 | 0.12.2 |
Dependencies
Known vulnerabilities 19
- libssh: multiple-vulnerabilities
- libssh: null-dereference
- libssh: multiple-vulnerabilities
- libssh: multiple-vulnerabilities (CVE-2014-0017)
- libssh: man-in-the-middle-attack (CVE-2016-0739)
- libssh: remote-security-bypass (CVE-2018-10933)
- libssh: denial-of-service (CVE-2023-1667)
- libssh: unauthorized-access (CVE-2023-2283)
- libssh: extension-negotiation-downgrade (CVE-2023-48795)
- libssh: integer-overflow (CVE-2025-4877)
- libssh: heap-corruption (CVE-2025-4878)
- libssh: out-of-bounds-read (CVE-2025-5318)
- libssh: double-free (CVE-2025-5351)
- libssh: incorrect-calculation (CVE-2025-5372)
- libssh: denial-of-service (CVE-2025-5449)
- libssh: unspecified (CVE-2025-5987)
- libssh: null-pointer-dereference (CVE-2025-8114)
- libssh: denial-of-service (CVE-2025-8277)
- libssh: double-free