VULNERABILITY INTELLIGENCE

CVE-2015-1782

CVSS score6.8 MEDIUM

EPSS probability3.50%

CISA KEVNot currently listed

Published2015-03-13

Last modified2026-06-17

Description

The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.