Read the docs

libssh

Records45All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

libssh records in CISA KEV

No libssh vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libssh 45 records HIGH

Records

45 records

TI-2018-07745 CVE-2018-10933 · GHSA-22gf-f5w4-hrfq

Improper authentication in [UNKNOWN] libssh

Priority HIGH 82

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.91789 Published 2018-10-17 Fixed CWE-592
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2012-03902 CVE-2012-4562 · GHSA-44f3-h584-r9pm

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a…

Priority MEDIUM 47

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.12849 Published 2012-11-30 No fix listed CWE-189
TI-2019-11093 CVE-2019-14889 · GHSA-mrxf-x73j-79wm

OS command injection in Red Hat libssh

Priority MEDIUM 44

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03174 Published 2019-12-10 Fixed in 0.9.3, 0.8.8 CWE-78
TI-2025-04773 CVE-2025-5318 · GHSA-98qw-prqm-9f4p

Libssh: out-of-bounds read in sftp_handle()

Priority MEDIUM 41

A flaw was found in the libssh library in versions less than 0.11.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01886 Published 2025-06-24 Fixed in 0.11.2, 0.11.1-4.el10_0 +31 CWE-125
TI-2025-04824 CVE-2025-5372 · GHSA-59w5-j22f-h3rv

Libssh: incorrect return code handling in ssh_kdf() in libssh

Priority LOW 39

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00513 Published 2025-07-04 Partial fix · 0.11.2, 0.9.6-16.el8_10 +4 CWE-682
TI-2012-03899 CVE-2012-4559 · GHSA-px93-6r58-rr4j

Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2)…

Priority LOW 38

Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05176 Published 2012-11-30 No fix listed CWE-399
TI-2021-02579 CVE-2021-3634 · GHSA-4wwm-f449-qwpq

Out-of-bounds write in libssh

Priority LOW 36

A flaw has been found in libssh in versions prior to 0.9.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04683 Published 2021-08-31 Partial fix CWE-787
TI-2023-01564 CVE-2023-1667 · GHSA-fx73-x3p9-h2wf

NULL pointer dereference in libssh

Priority LOW 32

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01314 Published 2023-05-26 Partial fix CWE-476
TI-2023-03362 CVE-2023-3603 · GHSA-2c4f-vgwr-82q6

Processing sftp server read may cause null dereference

Priority LOW 31

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00903 Published 2023-07-21 No fix listed CWE-476
TI-2023-02141 CVE-2023-2283 · GHSA-h9jw-g3xj-5hwg

Improper authentication in libssh

Priority LOW 31

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01061 Published 2023-05-26 Partial fix CWE-287
Load more
Open these records in search →