2 matches found
libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation
A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution...
8.3CVSS7.3AI score0.00706EPSS
SaveExploits0References7
MGASA-2026-0273 Updated libssh2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Heap Buffer Over-read via sftpsymlink in sftp.c. CVE-2025-15661 libssh2 userauth.c userauthpassword integer overflow. CVE-2026-7598 Pre-Authentication DoS via SSHMSGEXTINFO Handler. CVE-2026-55199 Out-of-Bounds Write via Unchecked packetlength in...
9.2CVSS7.3AI score0.02027EPSS
SaveExploits14References10
20