1055 matches found
K000162673: libssh2 vulnerability CVE-2026-58050
Security Advisory Description libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an...
CVE-2026-66035 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66035 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
CVE-2026-66033 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66033 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
CVE-2026-66034 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66034 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
CVE-2026-66032 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66032 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
SUSE CVE-2026-66032
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...
SUSE CVE-2026-66033
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...
SUSE CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
SUSE CVE-2026-66035
libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libssh2: libssh2-1.11.1-10.3.hum1 aarch64, x8664 libssh2-devel-1.11.1-10.3.hum1 aarch64, x8664 libssh2-docs-1.11.1-10.3.hum1 noarch libssh2-1.11.1-10.3.hum1.src src Security Fixes: libssh2:...
libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation
A flaw was found in libssh2. A pre-authentication integer underflow vulnerability exists in the ssh2ciphercrypt function when negotiating AES-GCM ciphers during the handshake. A malicious SSH server can exploit this to trigger an out-of-bounds read and a memory copy operation with an extremely...
libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read
A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libssh2: libssh2-1.11.1-10.2.hum1 aarch64, x8664 libssh2-devel-1.11.1-10.2.hum1 aarch64, x8664 libssh2-docs-1.11.1-10.2.hum1 noarch libssh2-1.11.1-10.2.hum1.src src Security Fixes: libssh2:...
libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response
A flaw in libssh2 allows a malicious SSH server to send a malformed public key response, triggering an invalid memory cleanup. This can cause the connecting client application to crash or leak information...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libssh2: libssh2-1.11.1-10.1.hum1 aarch64, x8664 libssh2-devel-1.11.1-10.1.hum1 aarch64, x8664 libssh2-docs-1.11.1-10.1.hum1 noarch libssh2-1.11.1-10.1.hum1.src src Security Fixes: libssh2:...
libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response
A flaw in libssh2 allows a malicious SSH server to send a malformed public key response, triggering an invalid memory cleanup. This can cause the connecting client application to crash or leak information...
CVE-2026-66035
A flaw was found in libssh2. A malicious SSH server can exploit a pre-authentication heap buffer overflow vulnerability by sending a specially crafted packet during the Encrypt-then-MAC ETM cipher negotiation. This allows the server to corrupt heap memory, potentially leading to arbitrary code...
CVE-2026-66032
A flaw was found in libssh2. A malicious SSH Secure Shell server can exploit a double-free vulnerability in the sftpopen function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP SSH File Transfer Protocol session. This heap corruption can...
CVE-2026-66033
A flaw was found in libssh2. A pre-authentication integer underflow vulnerability exists in the ssh2ciphercrypt function when negotiating AES-GCM ciphers during the handshake. A malicious SSH server can exploit this to trigger an out-of-bounds read and a memory copy operation with an extremely...
