CVE-2013-0176

The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.

• CWE-399

• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html
• http://secunia.com/advisories/51982Vendor Advisory
• http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/Patch, Vendor Advisory
• http://www.ubuntu.com/usn/USN-1707-1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81595
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html
• http://secunia.com/advisories/51982Vendor Advisory
• http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/Patch, Vendor Advisory
• http://www.ubuntu.com/usn/USN-1707-1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81595

Published

Feb 5, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0170Use-after-free vulnerability in the virNetMessageFree functi…
• CVE-2013-0171Foreman before 1.1 allows remote attackers to execute arbitr…
• CVE-2013-0172Samba 4.0.x before 4.0.1, in certain Active Directory domain…
• CVE-2013-0173Foreman before 1.1 uses a salt of "foreman" to hash root pas…
• CVE-2013-0174The external node classifier (ENC) API in Foreman before 1.1…
• CVE-2013-0175multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 …
• CVE-2013-0177Multiple cross-site scripting (XSS) vulnerabilities in widge…
• CVE-2013-0178Insecure temporary file vulnerability in Redis before 2.6 re…5.5
• CVE-2013-0179The process_bin_delete function in memcached.c in memcached …
• CVE-2013-0180Insecure temporary file vulnerability in Redis 2.6 related t…5.5
• CVE-2013-0181Cross-site scripting (XSS) vulnerability in Views in the Sea…
• CVE-2013-0182The Payment module 7.x-1.x before 7.x-1.3 for Drupal does no…