Alpine/wolfssh: medium 5.3
src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and SSH_MSG_KEX_DH_GEX_REPLY (33) when a server receive
Action: Upgrade wolfssh to 1.6.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.6.0-r0 | - |
Fixed versions
| 1.6.0-r0 |
Sources
published · modified · JSON