Libssh2-Exploit

Libssh2-Exploit 目标 在这个项目中，我们旨在针对libssh2中CVE-2019-13115所描述的越界读取漏洞创建一个漏洞利用程序。构建一个恶意ssh服务器，使连接至它的客户端崩溃，并查看是否可以进一步利用此漏洞从客户端窃取数据。 让OpenSSH服务器运行起来 下载并解压 openssh-8.1p1.tar.gz（用于未经修改的OpenSSH服务器）或 openssh-malicious.zip（用于恶意服务器）。 进入该文件夹并运行以下命令 1. ./configure --with-md5-passwords --with-pam --with-selinux...

CVE-2026-55200

安全报告：CVE-2026-55200 📝 概述 CVE-2026-55200 是一个基于 堆 的严重内存溢出漏洞（动态内存损坏），影响版本至 1.11.1 的 libssh2 库。 它允许恶意 SSH 服务器攻击连接到它的脆弱客户端。 ⚡ 技术细节 漏洞类型： 内存溢出（ 基于堆的缓冲区溢出 ）。 主要影响： 远程代码执行 RCE 和拒绝服务 DoS。 攻击阶段： 发生在密码学身份验证之前 。 攻击向量： 恶意或被拦截的 SSH 服务器发送一个长度过长的数据包，溢出客户端分配的缓冲区。 🏗️ 供应链影响 该漏洞影响范围极广，因为 libssh2 被多种流行工具和语言使用： curl...

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

GHSA-2WXC-X7RJ-HG8F asyncssh has SCP Path Traversal to Arbitrary File Write

| | | |---|---| | Product | asyncssh all versions through 2.23.0 | | Related | CVE-2019-6111 same class in OpenSSH | | Fix | AsyncSSH 2.23.1 | A malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences. The SCP...

OESA-2026-3479 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

AZL-93396 CVE-2026-66032 affecting package libssh2 for versions less than 1.11.1-5

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...

DEBIAN-CVE-2024-52308

The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using gh codespace ssh or gh codespace logs commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running with...