Astra Linux – Vulnerability in libssh

A flaw was discovered in libssh. By using the ProxyCommand or ProxyJump feature, users can exploit unvalidated hostname syntax on the client side. This issue may allow an attacker to inject malicious code into the commands related to these features via the hostname parameter...

Astra Linux – Vulnerability in libssh

A NULL pointer dereference was detected in libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service...

K000163271: libssh vulnerabilities CVE-2026-59849 and CVE-2026-59851

Security Advisory Description CVE-2026-59849 A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance

Summary Vulnerabilities identified in cyclops of IBM Netezza Appliance have been addressed in version 11.3.1.4. Vulnerability Details CVEID:CVE-2026-59843 DESCRIPTION: A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing...

K000163232: libssh vulnerability CVE-2026-59847

Security Advisory Description A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. CVE-2026-59847 Impact There is no impact...

ROS-20260907-73-0006

The vulnerability in libssh is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260907-73-0007

The vulnerability in libssh is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0010

The vulnerability in libssh is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260907-73-0015

The vulnerability in libssh is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260907-73-0009

The vulnerability in libssh is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260907-73-0011

The vulnerability in libssh is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260907-73-0008

The vulnerability in libssh is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260907-73-0012

The vulnerability in libssh is related to incorrect checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle Linux 9 : ELSA-2026-62217-0: / libssh (ELSA-2026-622170)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622170 advisory. 0.10.4-19 - Backport CVE patches from 0.11.5 Resolves: RHEL-213033 Resolves: RHEL-213041 Resolves: RHEL-213047 Resolves: RHEL-213081 Resolves:...

ROS-20260907-73-0016

The vulnerability in libssh is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260907-73-0013

The vulnerability in libssh is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20260907-73-0014

The vulnerability in libssh relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

MiracleLinux 9 : libssh-0.10.4-19.el9_8 (AXSA:2026-1751:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1751:03 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read...

Oracle Linux 8 : ELSA-2026-62218-0: / libssh (ELSA-2026-622180)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622180 advisory. 0.9.6-17 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves:...

MiracleLinux 8 : libssh-0.9.6-17.el8_10 (AXSA:2026-1742:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1742:02 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read...