CVE-2026-59848 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59849 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-CR6P-6527-344M vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-JP6G-7MQJ-WJ53 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-MQ2J-7VQ4-77M8 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-15370 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59847 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59850 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-4H4R-Q9XG-GFMM vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59842 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59843 vulnerabilities

Vulnerabilities for packages: libssh...

CLSA-2026-1786466122 libssh: Fix of 2 CVEs

CVE-2026-59847: fix incorrect return-code check of EVPEncryptFinal / EVPDecryptFinal that could bypass AES-GCM tag verification - CVE-2026-59850: reject SSHMSGCHANNELDATA received after remote close to avoid processing data on closed channels...

CLSA-2026-1786448214 libssh: Fix of 2 CVEs

CVE-2026-59847: integrity downgrade of AES-GCM ciphers in the OpenSSL backend, where a wrong EVPDecryptFinal return-code check let a forged authentication tag pass and silently reduced AES-GCM to AES-CTR - CVE-2026-59850: use-after-free via channel data callbacks invoked on remotely-closed...

CLSA-2026-1786446507 libssh: Fix of 3 CVEs

CVE-2026-59843: reject a peer-supplied maximum packet size of zero to prevent infinite loops in channel writes - CVE-2026-59848: track outstanding SFTP request IDs and reject responses with unknown IDs to prevent unbounded client memory growth - CVE-2026-59845: handle ProxyCommand fork failures...

...[ More ]

A proof of concept exploit for an authentication bypass vulnerability in libssh version 0.12.0. The vulnerability affects servers using GSSAPI key exchange and allows a client possessing a valid Kerberos ticket for any principal in the realm to authenticate as an arbitrary local user. The server...

Photon OS 5.0: Libssh PHSA-2023-5.0-91-0089

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0089. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin:Vulnerability in libssh affects IBM Netezza Appliance

Summary The libssh package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2025-5318 Vulnerability Details CVEID:CVE-2025-5318 DESCRIPTION: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in th...

SUSE-SU-2026:23168-1 Security update for libssh

This update for libssh fixes the following issues - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. - CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure...

SUSE-SU-2026:23056-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2026-3731: denial of Service via out-of-bounds read in SFTP extension name handler bsc1259377. - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP re...

CLSA-2026-1786012443 libssh: Fix of 2 CVEs

CVE-2026-59847: integrity downgrade of AES-GCM ciphers in the OpenSSL backend, where a wrong EVPDecryptFinal return-code check let a forged authentication tag pass and silently reduced AES-GCM to AES-CTR - CVE-2026-59850: use-after-free via channel data callbacks invoked on remotely-closed...