Libssh - vulnerabilities (CVEs)

45 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-21.

Products

Libssh - 45 CVEs

Newest CVEs of Libssh

CVE-2026-59851 - CVSS 8.8 (high), 2026-07-21: A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is…
CVE-2026-59850 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has…
CVE-2026-59849 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when…
CVE-2026-59848 - CVSS 5.3 (medium), 2026-07-21: A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded…
CVE-2026-59847 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an…
CVE-2026-59846 - CVSS 3.9 (low), 2026-07-21: A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables…
CVE-2026-59844 - CVSS 6.5 (medium), 2026-07-21: A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to…
CVE-2026-59845 - CVSS 5.9 (medium), 2026-07-21: A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent…
CVE-2026-59843 - CVSS 6.5 (medium), 2026-07-21: A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop…
CVE-2026-59842 - CVSS 5.3 (medium), 2026-07-21: A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without…
CVE-2026-15370 - CVSS 7.3 (high), 2026-07-21: A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer.…
CVE-2025-14821 - CVSS 7.8 (high), 2026-04-07: A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation…
CVE-2026-0968 - CVSS 3.1 (low), 2026-03-26: A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an…
CVE-2026-0966 - CVSS 8.2 (high), 2026-03-26: A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited…
CVE-2026-0965 - CVSS 3.3 (low), 2026-03-26: A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a…
CVE-2026-0964 - CVSS 6.3 (medium), 2026-03-26: A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be…
CVE-2026-0967 - CVSS 5.5 (medium), 2026-03-26: A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when…
CVE-2026-3731 - CVSS 7.5 (high), 2026-03-08: A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file…
CVE-2025-5449 - CVSS 6.5 (medium), 2025-07-25: A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow…
CVE-2025-8114 - CVSS 4.7 (medium), 2025-07-24: A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation…
CVE-2025-5987 - CVSS 8.1 (high), 2025-07-07: A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not…
CVE-2025-5351 - CVSS 6.5 (medium), 2025-07-04: A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into…
CVE-2025-5372 - CVSS 8.8 (high), 2025-07-04: A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to…
CVE-2025-5318 - CVSS 8.1 (high), 2025-06-24: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect…
CVE-2023-6004 - CVSS 4.8 (medium), 2024-01-03: A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may…
CVE-2023-6918 - CVSS 5.3 (medium), 2023-12-19: A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return…
CVE-2023-48795 - CVSS 5.9 (medium), 2023-12-18: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks…
CVE-2023-3603 - CVSS 6.5 (medium), 2023-07-21: A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up…
CVE-2023-2283 - CVSS 6.5 (medium), 2023-05-26: A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in…
CVE-2023-1667 - CVSS 6.5 (medium), 2023-05-26: A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of…