Lucene search
+L

23 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/12 12:00 a.m.•8 views

EulerOS 2.0 SP11 : libssh (EulerOS-SA-2026-4249)

According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...

7.5CVSS6.7AI score0.00567EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

CentOS Linux 8.4 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1786012208)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786012208 advisory. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove...

7.5CVSS6.7AI score0.00346EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/01 6:58 p.m.•16 views

libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-59847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/07/22 4:25 p.m.•22 views

SUSE CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

6.5CVSS6.3AI score0.00332EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
•added 2026/07/21 4:32 p.m.•25 views

libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2026/07/21 2:16 p.m.•35 views

AZL-93246 CVE-2026-59847 affecting package libssh for versions less than 0.10.6-9

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/21 2:16 p.m.•35 views

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS0.00332EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/07/21 2:16 p.m.•29 views

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/21 1:18 p.m.•87 views

CVE-2026-59847 Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

5.9CVSS0.00332EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/21 1:18 p.m.•25 views

EUVD-2026-46255

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

5.9CVSS6.3AI score0.00332EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/21 1:18 p.m.•89 views

CVE-2026-59847

CVE-2026-59847 affects the OpenSSH/libssh stack via an integrity downgrade caused by incorrect AES-GCM tag verification when using the OpenSSL backend. The provided connected documents indicate the issue in libssh before 0.11.5, with the vulnerability enabling an in-path attacker to compromise in...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2026/07/21 1:18 p.m.•4 views

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

8.2CVSS6.3AI score0.00332EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
•added 2026/07/21 1:18 p.m.•30 views

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/07/21 1:08 p.m.•34 views

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. Mitigation Disable the [email protected] and [email protected]...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-59847: Incorrect Check of Function Return Value

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•9 views

CVE-2026-59847: Incorrect Check of Function Return Value

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

7.5CVSS6.3AI score0.00332EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•42 views

PT-2026-61939

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can remove integrity protection. This allows an in-path attacker to modify plaintext during transmission without...

7.8CVSS6.3AI score0.00567EPSS
SaveExploits0References126
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-36618

Malicious code in bioql PyPI...

7.5CVSS7.3AI score0.00748EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/10/28 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2704)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.5AI score0.01863EPSS
SaveExploits0References2
Rows per page
Query Builder