Read the docs
Red Hat Security Advisory

RHSA-2026:18683

libssh security update

Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 10 records

TI-2026-00730 CVE-2026-0964 · GHSA-9p3w-rm2q-9gxc

Libssh: improper sanitation of paths received from scp servers

Priority LOW 28

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00424 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-22
TI-2025-04369 CVE-2025-4877 · GHSA-pwrf-jm93-99r3

Libssh: write beyond bounds in binary to base64 conversion functions

Priority LOW 20

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function.

CVSS 3.1MEDIUM 4.5 Local Low privileges No interaction EPSS 0.00203 Published 2025-08-20 Fixed in 0.11.2, 0.10.4-18.el9 CWE-787
TI-2025-04370 CVE-2025-4878 · GHSA-q2fw-m52x-w593

Libssh: use of uninitialized variable in privatekey_from_file()

Priority LOW 19

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function.

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00228 Published 2025-07-22 Partial fix · 0.11.2, 0.10.4-18.el9 CWE-416
TI-2026-00734 CVE-2026-0968 · GHSA-6w3m-r3qq-cr2h

Libssh: libssh: denial of service due to malformed sftp message

Priority LOW 16

A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00459 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-476
TI-2025-07576 CVE-2025-8277 · GHSA-39mw-228p-wr6v

Libssh: memory exhaustion via repeated key exchange in libssh

Priority LOW 16

A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00431 Published 2025-09-09 Partial fix · 0.11.3, 0.10.4-18.el9 CWE-401