libssh Heap Overflow DoS

The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libssh Authentication Bypass Info Disclosure

The vulnerability of the libssh library is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

MGASA-2026-0425 Updated libssh packages fix security vulnerabilities

Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...

Updated libssh packages fix security vulnerabilities

Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...

EulerOS Virtualization 2.11.1 : libssh (EulerOS-SA-2026-3433)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for...

EulerOS Virtualization 2.11.0 : libssh (EulerOS-SA-2026-3520)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for...

Astra Linux – Vulnerability in libssh

A flaw was discovered in the libssh API function sshscpnew, in versions prior to 0.9.3 and prior to 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a path provided by the user, is executed on the server side. If the library is used in a way that allows user...

Astra Linux – Vulnerability in libssh

A vulnerability has been identified in libssh up to version 0.11.3. The affected element is the function sftpextensionsgetname/sftpextensionsgetdata in the file src/sftp.c of the SFTP Extension Name Handler component. Performing operations on the argument idx can lead to out-of-bounds read...

Astra Linux – Vulnerability in libssh

A flaw was discovered in libssh versions built with OpenSSL versions older than 3.0. The issue lies with the sshkdf function, which is responsible for key derivation. Due to inconsistent interpretation of return values, OpenSSL uses 0 to indicate failure, while libssh uses 0 for success. As a...

Astra Linux – Vulnerability in curl

When performing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl may still mistakenly accept connections to hosts that are not present in the specified file, if those hosts are added as recognized in the libssh global knownhosts file...

Astra Linux – Vulnerability in libssh

A flaw was discovered in the abstract layer of the libssh library responsible for message digest MD operations, which is implemented by different supported crypto backends. The return values from these operations were not properly checked, which could lead to low-memory situations, NULL...

Astra Linux – Vulnerability in libssh

A NULL pointer dereference was detected in libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service...

Astra Linux – Vulnerability in libssh

A flaw was discovered in libssh. By using the ProxyCommand or ProxyJump feature, users can exploit unvalidated hostname syntax on the client side. This issue may allow an attacker to inject malicious code into the commands related to these features via the hostname parameter...

K000163271: libssh vulnerabilities CVE-2026-59849 and CVE-2026-59851

Security Advisory Description CVE-2026-59849 A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance

Summary Vulnerabilities identified in cyclops of IBM Netezza Appliance have been addressed in version 11.3.1.4. Vulnerability Details CVEID:CVE-2026-59843 DESCRIPTION: A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing...

K000163232: libssh vulnerability CVE-2026-59847

Security Advisory Description A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. CVE-2026-59847 Impact There is no impact...

ROS-20260907-73-0010

The vulnerability in libssh is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260907-73-0012

The vulnerability in libssh is related to incorrect checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0006

The vulnerability in libssh is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260907-73-0016

The vulnerability in libssh is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...