GHSA-QP28-HPG5-J7XC vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-X5CR-V39M-53GW vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-4846-7XWG-PW5M vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59843 vulnerabilities

Vulnerabilities for packages: libssh...

...[ More ]

A proof of concept exploit for an authentication bypass vulnerability in libssh version 0.12.0. The vulnerability affects servers using GSSAPI key exchange and allows a client possessing a valid Kerberos ticket for any principal in the realm to authenticate as an arbitrary local user. The server...

Photon OS 5.0: Libssh PHSA-2023-5.0-91-0089

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0089. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin:Vulnerability in libssh affects IBM Netezza Appliance

Summary The libssh package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2025-5318 Vulnerability Details CVEID:CVE-2025-5318 DESCRIPTION: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in th...

SUSE-SU-2026:23168-1 Security update for libssh

This update for libssh fixes the following issues - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. - CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure...

SUSE-SU-2026:23056-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2026-3731: denial of Service via out-of-bounds read in SFTP extension name handler bsc1259377. - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP re...

Photon OS 5.0: Libssh PHSA-2024-5.0-91-0187

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh PHSA-2025-5.0-91-0597

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0597. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh PHSA-2026-5.0-91-0782

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0782. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLES15 Security Update : libssh (SUSE-SU-2026:3463-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3463-1 advisory. - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via...

Security update for libssh

This update for libssh fixes the following issues: CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure bsc127216...

[SECURITY] [DSA 6410-1] libssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6410-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2026 https://www.debian.org/security/faq -...

Debian dsa-6410 : libssh-4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6410 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6410-1 [email protected] https://www.debian.org/securit...

[SECURITY] Fedora 44 Update: libssh-0.12.2-1.fc44

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...

Fedora 44 : libssh (2026-c60881e04b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c60881e04b advisory. New upstream release 0.12.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libssh: libssh-0.12.2-1.hum1 aarch64, x8664 libssh-config-0.12.2-1.hum1 noarch libssh-devel-0.12.2-1.hum1 aarch64, x8664 libssh-0.12.2-1.hum1.src src...

libssh: libssh: stack buffer overflow in SFTP server longname construction

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...