[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE4v74rShJsSMBUkB4L0VCJzjAvMsDIRPO7plEpWow44":3,"g5a-risk:CVE-2015-3146":188},{"success":4,"data":5,"meta":186},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":74,"references":75,"referencesCount":116,"weaknesses":117,"weaknessesCount":121,"isActivelyExploited":122,"cisaInfo":15,"otxData":15,"relatedBlogPosts":123,"seoMetadata":124,"configurations":149,"relatedVendorCves":184,"notableEvents":185},"CVE-2015-3146","What is CVE-2015-3146?","The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.","The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remot...","2016-04-13T17:59:03.1","2025-04-12T10:46:40.837",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.03959,[39,39,39,39,39,39,39],"High",[43,47,52,55,58,63,66,71],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"libssh","*","cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"15.10","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"debian","debian_linux","7.0","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":64,"criteria":65,"vulnerable":4},"8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":69,"criteria":70,"vulnerable":4},"fedoraproject","fedora","21","cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":72,"criteria":73,"vulnerable":4},"22","cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",8,[76,80,83,87,91,95,99,102,104,106,108,110,112,114],{"url":77,"source":78,"tags":79},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-July\u002F161802.html","Fedoraproject",[],{"url":81,"source":78,"tags":82},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-May\u002F158013.html",[],{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3488","Debian",[],{"url":88,"source":89,"tags":90},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2912-1","Ubuntu",[],{"url":92,"source":93,"tags":94},"https:\u002F\u002Fgit.libssh.org\u002Fprojects\u002Flibssh.git\u002Fcommit\u002F?h=libssh-0.6.5&id=94f6955fbaee6fda9385a23e505497efe21f5b4f","Libssh",[],{"url":96,"source":93,"tags":97},"https:\u002F\u002Fwww.libssh.org\u002F2015\u002F04\u002F30\u002Flibssh-0-6-5-security-and-bugfix-release\u002F",[98],"Vendor Advisory",{"url":100,"source":93,"tags":101},"https:\u002F\u002Fwww.libssh.org\u002Fsecurity\u002Fadvisories\u002FCVE-2015-3146.txt",[98],{"url":77,"source":78,"tags":103},[],{"url":81,"source":78,"tags":105},[],{"url":84,"source":85,"tags":107},[],{"url":88,"source":89,"tags":109},[],{"url":92,"source":93,"tags":111},[],{"url":96,"source":93,"tags":113},[98],{"url":100,"source":93,"tags":115},[98],14,[118],{"id":119,"name":119,"description":120},"Unknown","NVD-CWE-Other",1,false,[],{"title":125,"metaDescription":126,"keywords":127,"canonicalUrl":128,"structuredData":129},"What is CVE-2015-3146? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-3146, a high severity cyber security vulnerability from 2016. The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet h...","CVE-2015-3146, CVE-2015-3146 vulnerability, CVE-2015-3146 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, libssh security, canonical security, debian security, fedoraproject security, libssh vulnerability, ubuntu_linux vulnerability, debian_linux vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2015-3146",{"@context":130,"@type":131,"headline":125,"description":126,"datePublished":10,"dateModified":11,"author":132,"publisher":136,"about":140,"mainEntityOfPage":144,"articleSection":147,"keywords":148},"https:\u002F\u002Fschema.org","TechArticle",{"@type":133,"name":134,"url":135},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":133,"name":134,"url":135,"logo":137},{"@type":138,"url":139},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":141,"name":6,"description":142,"additionalType":143},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":145,"@id":146},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-3146","Cybersecurity","CVE-2015-3146, CVE-2015-3146 vulnerability, CVE-2015-3146 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[150,158,168,176],{"Operator":15,"Negate":15,"Nodes":151},[152],{"Operator":153,"Negate":15,"CPEMatch":154},"OR",[155],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":157},"749CD4EF-4CED-4189-B70A-EFB675E5D8B4","0.6.4",{"Operator":15,"Negate":15,"Nodes":159},[160],{"Operator":153,"Negate":15,"CPEMatch":161},[162,164,166],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":167,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E88A537F-F4D0-46B9-9E37-965233C2A355",{"Operator":15,"Negate":15,"Nodes":169},[170],{"Operator":153,"Negate":15,"CPEMatch":171},[172,174],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16F59A04-14CF-49E2-9973-645477EA09DA",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":175,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":15,"Negate":15,"Nodes":177},[178],{"Operator":153,"Negate":15,"CPEMatch":179},[180,182],{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"56BDB5A0-0839-4A20-A003-B8CD56F48171",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":183,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"253C303A-E577-4488-93E6-68A8DD942C38",[],[],{"lastModified":11,"cacheTime":187,"version":32},1792257866561,{"score":189,"band":190,"action":191,"scoredAt":192},49,"Medium","Plan remediation","2026-10-17T07:56:57.348807+00:00"]