CVE-2020-1730

A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.

• CWE-476
• CWE-476

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1730Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2A7BIFKUYIYKTY7FX4BEWVC2OHS5DPOU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLSWHBQ3EPKGTGLQNH554Z746BJ3C554/
• https://security.netapp.com/advisory/ntap-20200424-0001/Third Party Advisory
• https://usn.ubuntu.com/4327-1/Third Party Advisory
• https://www.libssh.org/security/advisories/CVE-2020-1730.txtVendor Advisory
• https://www.oracle.com/security-alerts/cpuoct2020.htmlPatch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1730Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2A7BIFKUYIYKTY7FX4BEWVC2OHS5DPOU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLSWHBQ3EPKGTGLQNH554Z746BJ3C554/
• https://security.netapp.com/advisory/ntap-20200424-0001/Third Party Advisory
• https://usn.ubuntu.com/4327-1/Third Party Advisory
• https://www.libssh.org/security/advisories/CVE-2020-1730.txtVendor Advisory
• https://www.oracle.com/security-alerts/cpuoct2020.htmlPatch, Third Party Advisory

Published

Apr 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1724A flaw was found in Keycloak in versions before 9.0.2. This …4.3
• CVE-2020-1725A flaw was found in keycloak before version 13.0.0. In some …5.4
• CVE-2020-1726A flaw was discovered in Podman where it incorrectly allows …5.9
• CVE-2020-1727A vulnerability was found in Keycloak before 9.0.2, where ev…5.4
• CVE-2020-1728A vulnerability was found in all versions of Keycloak where,…5.4
• CVE-2020-1729A flaw was found in SmallRye's API through version 1.6.1. Th…4.4
• CVE-2020-1731A flaw was found in all versions of the Keycloak operator, b…9.8
• CVE-2020-1732A flaw was found in Soteria before 1.0.1, in a way that mult…4.2
• CVE-2020-1733A race condition flaw was found in Ansible Engine 2.7.17 and…5
• CVE-2020-1734A flaw was found in the pipe lookup plugin of ansible. Arbit…7.4
• CVE-2020-1735A flaw was found in the Ansible Engine when the fetch module…4.6
• CVE-2020-17352Two OS command injection vulnerabilities in the User Portal …8.8