1179 matches found
SUSE CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
The vulnerability of the publickey_response_success() function in the libssh2 library allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...
Important Photon OS Security Update - PHSA-2026-5.0-91-0912
Updates of 'libssh2' packages of Photon OS have been released...
Photon OS 5.0: Libssh2 PHSA-2026-5.0-0900
An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0900. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important Photon OS Security Update - PHSA-2026-5.0-92-0912
Updates of 'libssh2' packages of Photon OS have been released...
CVE-2026-58051
A flaw in libssh2 allows a malicious SSH server to send a malformed public key response, triggering an invalid memory cleanup. This can cause the connecting client application to crash or leak information. Mitigation To mitigate this issue, ensure your applications connect only to trusted and...
CVE-2026-58050
A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution. Mitigation To mitigate this issue,ensure your applications are running strictly on 64-bit...
GHSA-R8MH-X5QV-7GG2 vulnerabilities
Vulnerabilities for packages: libssh2...
CVE-2026-55200 vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-R8MH-X5QV-7GG2 vulnerabilities
Vulnerabilities for packages: libssh2...
CVE-2026-55200 vulnerabilities
Vulnerabilities for packages: libssh2...
Exploit for Integer Overflow to Buffer Overflow in Libssh2
CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulne...
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
...
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible code execution. No credentials, no user interaction. The bug affects every release up to and includin...
[SECURITY] Fedora 44 Update: libssh2-1.11.1-9.fc44
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10...
Fedora 44 : libssh2 (2026-ca858b3ed8)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ca858b3ed8 advisory. This update addresses a few security issues, one of which could plausibly result in remote code execution. Tenable has extracted the preceding...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the processing of a 32-bit attribute count received from a remote server in the publickey subsystem. An attacker can cause a heap buffer overflow by sending a specially crafted response that trigge...
Use of Uninitialized Resource
Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the cleanup process of the publickey list when a parse failure occurs. An attacker can cause memory corruption or a denial of service by sending a malformed response from a malicious SSH server that...
CVE-2026-58050
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without bounds checking, so on 32-bit platforms the multiplication overflows to an undersized buffer. A malicious S...
CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...