1009 matches found
PT-2026-64379
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A double-free issue exists in the sftp open function within src/sftp.c. This occurs when a malicious SSH server responds to SSH FXP OPEN with SSH FXP STATUS containing FX OK, causing the response da...
PT-2026-64380
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A pre-authentication integer underflow exists in the ssh2 cipher crypt function within src/openssl.c. A malicious SSH server can trigger this issue during the handshake by negotiating AES-GCM cipher...
Amazon Linux 2 : libssh2, --advisory ALAS2-2026-3813 (ALAS-2026-3813)
The version of libssh2 installed on the remote host is prior to 1.4.3-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3813 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses i...
EulerOS Virtualization 2.10.0 : libssh2 (EulerOS-SA-2026-2858)
According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the fi...
EulerOS Virtualization 2.12.0 : libssh2 (EulerOS-SA-2026-2783)
According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the fi...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2737)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
Amazon Linux 2023 : libssh2, libssh2-devel (ALAS2023-2026-1966)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1966 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation numattrs sizeoflibssh2publickeyattribute without...
OESA-2026-3017 libssh2 security update
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...
OESA-2026-3014 libssh2 security update
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...
SUSE-SU-2026:3076-1 Security update for libssh2_org
This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530...
CVE-2026-55199 vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-3WQH-87FG-FFGG vulnerabilities
Vulnerabilities for packages: libssh2...
CVE-2025-15661 vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-3CFQ-4XX4-RMPG vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-3CFQ-4XX4-RMPG vulnerabilities
Vulnerabilities for packages: libssh2...
GHSA-3WQH-87FG-FFGG vulnerabilities
Vulnerabilities for packages: libssh2...
CVE-2025-15661 vulnerabilities
Vulnerabilities for packages: libssh2...
CVE-2026-55199 vulnerabilities
Vulnerabilities for packages: libssh2...
EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2700)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2659)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...