Threats tagged 'ghsa-jp6g-7mqj-wj53'

A logic flaw in libssh's automatic certificate-based public key authentication can cause clients to enter an infinite loop when configured certificates are missing or repeatedly rejected by a server. This results in a denial of service due to resource exhaustion. The vulnerability has a low severity score and does not impact confidentiality or integrity. A security update is available from Red Hat to address this issue.