Vulnerabilities

TI-2026-00731 CVE-2026-0965 · GHSA-q35q-xwh9-8pgw

Libssh: libssh: denial of service via improper configuration file handling

LOW 15

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing.

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.00164 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-73

TI-2026-00733 CVE-2026-0967 · GHSA-6jpg-fr24-wpvf

Libssh: libssh: denial of service via inefficient regular expression processing

LOW 24

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00231 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-1333

TI-2026-00734 CVE-2026-0968 · GHSA-6w3m-r3qq-cr2h

Libssh: libssh: denial of service due to malformed sftp message

LOW 16

A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00459 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-476

TI-2026-00730 CVE-2026-0964 · GHSA-9p3w-rm2q-9gxc

Libssh: improper sanitation of paths received from scp servers

LOW 28

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00424 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-22

TI-2026-00732 CVE-2026-0966 · GHSA-wcqf-w94x-4wg2

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

MEDIUM 43