TI-2026-00732 CVE-2026-0966 · GHSA-wcqf-w94x-4wg2
Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
Priority MEDIUM 43
A flaw was found in libssh.
RHSA-2026:18160
libssh security update
Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) libssh-devel-0.12.0-2.el10
- Red Hat Enterprise Linux BaseOS (v. 10) libssh-0.12.0-2.el10, libssh-config-0.12.0-2.el10
Fixes 5 records
TI-2026-00730 CVE-2026-0964 · GHSA-9p3w-rm2q-9gxc
Libssh: improper sanitation of paths received from scp servers
Priority LOW 28
A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.
TI-2026-00733 CVE-2026-0967 · GHSA-6jpg-fr24-wpvf
Libssh: libssh: denial of service via inefficient regular expression processing
Priority LOW 24
A flaw was found in libssh.
TI-2026-00734 CVE-2026-0968 · GHSA-6w3m-r3qq-cr2h
Libssh: libssh: denial of service due to malformed sftp message
Priority LOW 16
A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation.
TI-2026-00731 CVE-2026-0965 · GHSA-q35q-xwh9-8pgw
Libssh: libssh: denial of service via improper configuration file handling
Priority LOW 15
A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing.