Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors which triggers a buffer overflow infinite loop or possibly some other unspecified vulnerabilities.