SUSE CVE-2026-55200

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to corrupt heap memory and achieve...

CVE-2026-55200

CVE-2026-55200 affects libssh2 up to version 1.11.1. The vulnerability is an out-of-bounds write in ssh2_transport_read() caused by failure to enforce upper bounds on packet_length, allowing remote attackers to send crafted SSH packets to corrupt heap memory and achieve remote code execution. The...