3 matches found
EUVD-2026-48720
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...
8.7CVSS5.9AI score0.0037EPSS
SaveExploits0References3
Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2019-3855)
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. This plugin...
9.3CVSS7.2AI score0.09219EPSS
SaveExploits0References4
20