Vulnerabilities

TI-2026-42667 CVE-2026-59851 · GHSA-x5cr-v39m-53gw

Libssh: libssh: authentication bypass via missing gssapi principal check

MEDIUM 41

A flaw was found in libssh.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00489 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-863

TI-2026-42666 CVE-2026-59850 · GHSA-cr6p-6527-344m

Libssh: libssh: use-after-free via data callbacks on closed channels

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-416

TI-2026-42665 CVE-2026-59849 · GHSA-jp6g-7mqj-wj53

Libssh: libssh: denial of service via automatic certificate authentication loop

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00438 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-835

TI-2026-42664 CVE-2026-59848 · GHSA-4h4r-q9xg-gfmm

Libssh: libssh: denial of service via sftp responses with unknown request ids

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00341 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-770

TI-2026-42663 CVE-2026-59847 · GHSA-mq2j-7vq4-77m8

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

LOW 39

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-253

TI-2026-42662 CVE-2026-59846 · GHSA-fvwj-j79q-57v7

Libssh: libssh: information disclosure via proxycommand %r username expansion

LOW 17

A flaw was found in libssh.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.0012 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-78

TI-2026-42660 CVE-2026-59844 · GHSA-qp28-hpg5-j7xc

Libssh: libssh: denial of service via oversized sftp read length

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00567 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-789

TI-2026-42661 CVE-2026-59845 · GHSA-97fp-2vw9-q5jg

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

LOW 25

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00104 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-390

TI-2026-42659 CVE-2026-59843 · GHSA-4846-7xwg-pw5m

Libssh: libssh: denial of service via zero advertised channel packet size

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00567 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-835

TI-2026-42658 CVE-2026-59842 · GHSA-x94w-cg8g-g593

Libssh: libssh: information disclosure via short gssapi curve25519 public key

LOW 25

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00493 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-125

TI-2026-12931 CVE-2026-15370 · GHSA-6j7f-8jjp-mm8c

Libssh: libssh: stack buffer overflow in sftp server longname construction

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00168 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.2-1.hum1 CWE-121

TI-2025-13523 CVE-2025-14821 · GHSA-5jf9-8f86-jhvw

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

LOW 35

A flaw was found in libssh.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00135 Published 2026-04-07 Fixed in 0.12.0-1.1.hum1 CWE-427

TI-2026-00731 CVE-2026-0965 · GHSA-q35q-xwh9-8pgw

Libssh: libssh: denial of service via improper configuration file handling

LOW 15

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing.

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.00164 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-73

TI-2026-00733 CVE-2026-0967 · GHSA-6jpg-fr24-wpvf

Libssh: libssh: denial of service via inefficient regular expression processing

LOW 24

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00231 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-1333

TI-2026-00734 CVE-2026-0968 · GHSA-6w3m-r3qq-cr2h

Libssh: libssh: denial of service due to malformed sftp message

LOW 16

A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00459 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-476

TI-2026-00730 CVE-2026-0964 · GHSA-9p3w-rm2q-9gxc

Libssh: improper sanitation of paths received from scp servers

LOW 28

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00424 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 CWE-22

TI-2026-00732 CVE-2026-0966 · GHSA-wcqf-w94x-4wg2

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

MEDIUM 43

A flaw was found in libssh.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00604 Published 2026-03-26 Partial fix · 0.12.0-2.el10, 0.10.4-18.el9 +1 CWE-124

TI-2026-03221 CVE-2026-3731 · GHSA-wg5h-wgv3-pgqh

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

LOW 38

A weakness has been identified in libssh up to 0.11.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00724 Published 2026-03-08 Partial fix · 0.11.4, 0.12.0 CWE-119

TI-2025-04896 CVE-2025-5449 · GHSA-q9x7-4rf7-4xq2

Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

LOW 31

A flaw was found in the SFTP server message decoding logic of libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01027 Published 2025-07-25 No fix listed CWE-190

TI-2025-07421 CVE-2025-8114 · GHSA-fpr2-pgq7-qwg4

Libssh: null pointer dereference in libssh kex session id calculation

LOW 21

A flaw was found in libssh, a library that implements the SSH protocol.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00259 Published 2025-07-24 Partial fix · 0.11.3, 0.10.4-18.el9 CWE-476

TI-2025-05409 CVE-2025-5987 · GHSA-3pvj-q7qj-89fg

Libssh: invalid return code for chacha20 poly1305 with openssl backend

MEDIUM 41

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0173 Published 2025-07-07 Partial fix · 0.11.2, 0.11.1-5.el10_1 +13 CWE-393

TI-2025-04805 CVE-2025-5351 · GHSA-pfqf-mv4p-9j4r

Libssh: double free vulnerability in libssh key export functions

LOW 30

A flaw was found in the key export functionality of libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0063 Published 2025-07-04 Partial fix · 0.11.2, 0.10.4-18.el9 CWE-415

TI-2025-04824 CVE-2025-5372 · GHSA-59w5-j22f-h3rv

Libssh: incorrect return code handling in ssh_kdf() in libssh

LOW 39

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00513 Published 2025-07-04 Partial fix · 0.11.2, 0.9.6-16.el8_10 +4 CWE-682

TI-2025-04773 CVE-2025-5318 · GHSA-98qw-prqm-9f4p

Libssh: out-of-bounds read in sftp_handle()

MEDIUM 41

A flaw was found in the libssh library in versions less than 0.11.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01886 Published 2025-06-24 Fixed in 0.11.2, 0.11.1-4.el10_0 +31 CWE-125

TI-2023-05531 CVE-2023-6004 · GHSA-f35j-mfvw-p857

Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname

LOW 24

A flaw was found in libssh.

CVSS 3.1MEDIUM 4.8 Local Low privileges User interaction EPSS 0.00449 Published 2024-01-03 Partial fix · 0.9.6-14.el8, 0.10.4-13.el9 CWE-74

Vulnerabilities

Filters