1309 matches found
EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2543)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
CVE-2026-55199 affecting package libssh2 for versions less than 1.11.1-4
CVE-2026-55199 affecting package libssh2 for versions less than 1.11.1-4. A patched version of the package is available...
Photon OS 5.0: Libssh2 PHSA-2026-5.0-0912
An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0912. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Ubuntu 24.04 LTS / 25.10 / 26.04 LTS : libssh2 vulnerabilities (USN-8486-1)
The remote Ubuntu 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8486-1 advisory. It was discovered that libssh2 incorrectly handled the sftpsymlink function. A malicious SSH server or machine-in-the-middle attacker...
Exploit for Integer Overflow to Buffer Overflow in Libssh2
Reporte de Seguridad: CVE-2026-55200 📝 Descripción General...
USN-8486-1: libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled the sftpsymlink function. A malicious SSH server or machine-in-the-middle attacker could possibly use this issue to obtain sensitive information or cause a denial of service. CVE-2025-15661 It was discovered that libssh2 had a pre-authentication...
USN-8486-1 libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled the sftpsymlink function. A malicious SSH server or machine-in-the-middle attacker could possibly use this issue to obtain sensitive information or cause a denial of service. CVE-2025-15661 It was discovered that libssh2 had a pre-authentication...
SUSE CVE-2026-58050
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious S...
SUSE CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
Photon OS 5.0: Libssh2 PHSA-2026-5.0-0900
An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0900. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important Photon OS Security Update - PHSA-2026-5.0-0912
Updates of 'libssh2' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-91-0912
Updates of 'libssh2' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-92-0912
Updates of 'libssh2' packages of Photon OS have been released...
The vulnerability of the publickey_response_success() function in the libssh2 library allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...
CVE-2026-58051
A flaw in libssh2 allows a malicious SSH server to send a malformed public key response, triggering an invalid memory cleanup. This can cause the connecting client application to crash or leak information. Mitigation To mitigate this issue, ensure your applications connect only to trusted and...
CVE-2026-58050
A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution. Mitigation To mitigate this issue,ensure your applications are running strictly on 64-bit...
CVE-2026-55200 vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-R8MH-X5QV-7GG2 vulnerabilities
Vulnerabilities for packages: libssh2...
