GLSA-202608-17 : libssh2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-17 libssh2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libssh2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

SUSE SLED15 / SLES15 Security Update : libssh2_org (SUSE-SU-2026:3541-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3541-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. ...

Security update for libssh2_org

This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-58050: heap buffer overflow d...

SUSE SLES12 Security Update : libssh2_org (SUSE-SU-2026:3525-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3525-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow...

K000162760: libssh2 vulnerability CVE-2025-15661

Security Advisory Description libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c that allows a malicious SSH server or man-in-the-middle attacker to disclose heap memory contents or cause a crash by sending ...

CVE-2025-15661 vulnerabilities

Vulnerabilities for packages: libssh2...

CVE-2025-15661

libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c that allows a malicious SSH server or man-in-the-middle attacker to disclose heap memory contents or cause a crash by sending a crafted SSHFXPNAME response...