18 matches found
ROOT-OS-ALPINE-323-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root
Root has patched CVE-2026-58050 in the libssh2 package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root
Root has patched CVE-2026-58050 in the libssh2 package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root
Root has patched CVE-2026-58050 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...
OESA-2026-3394 libssh2 security update
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count fr...
OESA-2026-3393 libssh2 security update
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count fr...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libssh2: libssh2-1.11.1-10.4.hum1 aarch64, x8664 libssh2-devel-1.11.1-10.4.hum1 aarch64, x8664 libssh2-docs-1.11.1-10.4.hum1 noarch libssh2-1.11.1-10.4.hum1.src src Security Fixes: libssh2:...
SUSE SLED15 / SLES15 Security Update : libssh2_org (SUSE-SU-2026:3541-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3541-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. ...
Security update for libssh2_org
This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-58050: heap buffer overflow d...
SUSE SLES12 Security Update : libssh2_org (SUSE-SU-2026:3525-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3525-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow...
K000162673: libssh2 vulnerability CVE-2026-58050
Security Advisory Description libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an...
libssh2: Fix of CVE-2026-58050
CVE-2026-58050: cap publickey list attribute count to prevent 32-bit multiplication overflow in libssh2publickeylistfetch...
Amazon Linux 2 : libssh2, --advisory ALAS2-2026-3813 (ALAS-2026-3813)
The version of libssh2 installed on the remote host is prior to 1.4.3-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3813 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses i...
Amazon Linux 2023 : libssh2, libssh2-devel (ALAS2023-2026-1966)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1966 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without...
BELL-CVE-2026-58050
Bulletin has no description...
UBUNTU-CVE-2026-58050
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious S...
CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious S...
Linux Distros Unpatched Vulnerability : CVE-2026-58050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs...
