TI-2026-06681 CVE-2026-7598 · GHSA-jhp3-h4hp-2c3p
libssh2 userauth.c userauth_password integer overflow
Priority HIGH 70
A security vulnerability has been detected in libssh2 up to 1.11.1.
RHSA-2026:61752
libssh2 security update
Released 2026-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) libssh2-1.8.0-4.el7_9.2, libssh2-1.8.0-4.el7_9.2.ppc
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) libssh2-devel-1.8.0-4.el7_9.2, libssh2-devel-1.8.0-4.el7_9.2.ppc
Fixes 4 records
TI-2026-47021 CVE-2026-66032 · GHSA-83r8-6c29-8gwr
libssh2 Double-Free Heap Corruption via sftp_open()
Priority MEDIUM 40
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening a…
TI-2026-47023 CVE-2026-66034 · GHSA-6h6q-9mwg-r6x7
libssh2 Heap Out-of-Bounds Read via publickey subsystem
Priority LOW 36
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized poin…
TI-2026-41805 CVE-2026-58050 · GHSA-mf77-5hj2-98w9
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
Priority LOW 36
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds checking, so on…