Lucene search
K

14 matches found

CBLMariner
CBLMariner
added 2026/06/05 12:59 p.m.8 views

CVE-2026-0968 affecting package libssh for versions less than 0.10.6-8

CVE-2026-0968 affecting package libssh for versions less than 0.10.6-8. A patched version of the package is available...

3.1CVSS6.1AI score0.00442EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2026/05/19 9:10 a.m.11 views

Moderate: Red Hat Security Advisory: libssh security update

An update for libssh is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.2CVSS6.1AI score0.00582EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:0 a.m.8 views

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2026-1632)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1632 advisory. libssh OOB Read in sftpparselongname CVE-2026-0968 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for this iss...

3.1CVSS6.4AI score0.00442EPSS
Exploits0References4
OSV
OSV
added 2026/04/29 11:20 a.m.3 views

OPENSUSE-SU-2026:20647-1 Security update for libssh

This update for libssh fixes the following issues: - Update to version 0.11.4: - CVE-2026-0964: SCP Protocol Path Traversal in sshscppullrequest bsc1258049 - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files bsc1258045 - CVE-2026-0966: Buffer underflow in...

8.2CVSS6.3AI score0.00582EPSS
Exploits0References14
OSV
OSV
added 2026/04/20 5:11 p.m.6 views

CLSA-2026-1776705065 libssh: Fix of CVE-2026-0968

CVE-2026-0968: sanitize input handling in sftpparselongname to prevent OOB read when processing malformed SFTP longname fields, add unit tests...

3.1CVSS5.8AI score0.00442EPSS
Exploits0References1
OSV
OSV
added 2026/04/16 5:49 p.m.5 views

CLSA-2026-1776361748 Fix CVE(s): CVE-2026-0968

SECURITY UPDATE: heap read past bounds in sftpparselongname from malicious SFTP longname field - debian/patches/CVE-2026-0968.patch: validate longname pointer and longnamefield; bound string walks at NUL; fail if field not found - CVE-2026-0968...

3.1CVSS5.8AI score0.00442EPSS
Exploits0References1
OSV
OSV
added 2026/04/14 2:50 p.m.8 views

CLSA-2026-1776178207 libssh: Fix of CVE-2026-0968

CVE-2026-0968: sftpparselongname out-of-bounds access...

3.1CVSS6AI score0.00442EPSS
Exploits0References1
OSV
OSV
added 2026/03/15 5:53 a.m.4 views

OESA-2026-1562 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

8.2CVSS5.9AI score0.00582EPSS
Exploits0References6
OSV
OSV
added 2026/03/15 5:53 a.m.3 views

OESA-2026-1559 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

8.2CVSS6.1AI score0.00582EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2026/03/05 12:0 a.m.6 views

openSUSE Security Advisory (SUSE-SU-2026:0779-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.1AI score0.00582EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2026/02/25 12:0 a.m.4 views

Ubuntu: Security Advisory (USN-8051-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.1AI score0.00582EPSS
Exploits0References2
OSV
OSV
added 2026/02/15 6:8 a.m.3 views

BELL-CVE-2026-0968

Bulletin has no description...

3.1CVSS5.1AI score0.00442EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/02/12 12:27 a.m.3 views

SUSE CVE-2026-0968

A flaw was found in libssh in which a malicious SFTP SSH File Transfer Protocol server can exploit this by sending a malformed 'longname' field within an SSHFXPNAME message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can...

3.7CVSS6.4AI score0.00442EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-0968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh in which a malicious SFTP SSH File Transfer Protocol server can exploit this by sending a malformed 'longname' field within an...

3.1CVSS6.3AI score0.00442EPSS
Exploits0References3
Rows per page
Query Builder