GHSA-3WQH-87FG-FFGG vulnerabilities

Vulnerabilities for packages: libssh2...

CVE-2025-15661 vulnerabilities

Vulnerabilities for packages: libssh2...

GHSA-3CFQ-4XX4-RMPG vulnerabilities

Vulnerabilities for packages: libssh2...

GHSA-3WQH-87FG-FFGG vulnerabilities

Vulnerabilities for packages: libssh2...

GHSA-3CFQ-4XX4-RMPG vulnerabilities

Vulnerabilities for packages: libssh2...

CVE-2025-15661 vulnerabilities

Vulnerabilities for packages: libssh2...

CVE-2026-55199 vulnerabilities

Vulnerabilities for packages: libssh2...

EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2700)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2659)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

Ubuntu 24.04 LTS / 26.04 LTS : libssh2 vulnerabilities (USN-8532-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8532-1 advisory. It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH serv...

USN-8532-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2026-58050 It was discovered that libssh2 did not properly...

USN-8532-1 libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2026-58050 It was discovered that libssh2 did not properly...

[SECURITY] Fedora 43 Update: libssh2-1.11.1-9.fc43

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10...

Fedora 43 : libssh2 (2026-eed9e67393)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-eed9e67393 advisory. This update addresses a few security issues, one of which could plausibly result in remote code execution. Tenable has extracted the preceding...

JLSEC-2026-663 libssh2 through 1.11.1 grows its publickey list with `SSH2_REALLOC` but does not zero-initialize new...

libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...

JLSEC-2026-662 libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a...

libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious S...

JLSEC-2026-661 libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in...

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to corrupt heap memory and achieve...

JLSEC-2026-660 libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service...

libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSHMSGEXTINFO handler in src/packet.c that allows a malicious SSH server to cause a client CPU exhaustion loop by sending a crafted extension count value. A malicious server can s...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2603)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2543)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...