ROOT-OS-ALPINE-323-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root

Root has patched CVE-2026-66034 in the libssh2 package for Root:Alpine:3.23. Multiple fixed versions available...

Amazon Linux 2023 : libssh2, libssh2-devel (ALAS2023-2026-2056)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2056 advisory. libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any...

SUSE SLES12 Security Update : libssh2_org (SUSE-SU-2026:3525-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3525-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow...

BELL-CVE-2026-66034

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-66034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length...

CVE-2026-66034

creationtimestamp| type| source ---|---|--- 2026-07-24 18:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrfwnsgj2k2q 2026-07-26 06:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrjrnqiulj22 2026-07-27 09:04:04+00:00| seen|...

CVE-2026-66034

Impact: libssh2 up to 1.11.1 contains a missing bounds check in libssh2_publickey_list_fetch() that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and to free an uninitialized pointer during error cleanup. This leaks heap pointers from adjacent allocations, d...

CVE-2026-66034

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...