Every CVE Search/ Get API key

CVE-2016-0787

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets...

5.9 MediumFix available

CVE-2016-0787 is a medium vulnerability (CVSS 5.9) in Libssh2, published February 23, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. Fixed in libssh2 1.7.0-r0.

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

2.59%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.9

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
CVE-2016-0787
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
CVE-2016-0787
Updated
2026-11-02
EUVDEUVD-2016-0800 No score

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
EUVD-2016-0800
Updated
2026-11-03
GitHub AdvisoriesGHSA-6wmj-27wm-wwx6 5.9

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets...

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
GHSA-6wmj-27wm-wwx6
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVALPINE-CVE-2016-0787 5.9

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
ALPINE-CVE-2016-0787
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSV 5.9

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
CVE-2016-0787
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2016-0787 5.9

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
DEBIAN-CVE-2016-0787
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2016-0787 5.9

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Record
UBUNTU-CVE-2016-0787
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2016-0392 No score

Updated libssh2 packages fix security vulnerability

Andreas Schneider reported that libssh2 passes the number of bytes to a function that expects number of bits during the SSHv2 handshake when libssh2 is to get a suitable value for 'group order' in the Diffie-Hellman negotiation. This weakens significantly the handshake security, potentially allowing an eavesdropper with enough resources to decrypt or intercept SSH sessions (CVE-2016-0787).

Record
MGASA-2016-0392
Updated
2026-11-02
OSVopenSUSE-SU-2024:10190-1 No score

libssh2-1-1.7.0-1.5 on GA media

These are all security issues fixed in the libssh2-1-1.7.0-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10190-1
Updated
2026-11-02
OSVSUSE-SU-2016:0718-1 No score

Security update for libssh2_org

This update for libssh2_org fixes the following issues:

Security issue fixed:

  • CVE-2016-0787 (bsc#967026): Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys.

A feature was added:

  • Support of SHA256 digests for DH group exchanges was added (fate#320343, bsc#961964)

Bug fixed:

  • Properly detect EVP_aes_128_ctr at configure time (bsc#933336)
Record
SUSE-SU-2016:0718-1
Updated
2026-11-02
OSVSUSE-SU-2016:0723-1 No score

Security update for libssh2_org

This update for libssh2_org fixes the following issues:

  • Add SHA256 support for DH group exchange (fate#320343, bsc#961964)

  • fix CVE-2016-0787 (bsc#967026)

    • Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys.
Record
SUSE-SU-2016:0723-1
Updated
2026-11-02
OSVSUSE-SU-2017:2699-1 No score

Security update for SLES 12 Docker image

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

util-linux:

  • CVE-2015-5218
  • CVE-2016-5011
  • CVE-2017-2616

cracklib:

  • CVE-2016-6318

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • openldap2
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • shadow
  • zypper
Record
SUSE-SU-2017:2699-1
Updated
2026-11-02
OSVSUSE-SU-2017:2700-1 No score

Security update for SLES 12-SP1 Docker image

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

expat:

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306
  • CVE-2016-7056
  • CVE-2016-8610
  • CVE-2017-3731

cracklib:

  • CVE-2016-6318

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

util-linux:

  • CVE-2016-5011
  • CVE-2017-2616

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

update-alternatives:

  • CVE-2015-0860

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • lua51
  • lvm2
  • netcfg
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • sg3_utils
  • shadow
  • zypper
Record
SUSE-SU-2017:2700-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libssh2
Alpine:v3.4
 before 1.7.0-r0
1.7.0-r0
libssh2
Debian:12
 before 1.5.0-2.1
1.5.0-2.1
libssh2
Debian:13
 before 1.5.0-2.1
1.5.0-2.1
libssh2
Debian:14
 before 1.5.0-2.1
1.5.0-2.1
libssh2
Debian:6.0
 before 1.2.6-1+deb6u2, plus listed versions
1.2.6-1
1.2.6-1+deb6u2
libssh2
Debian:7
 before 1.4.2-1.1+deb7u2, plus listed versions
1.4.2-1.11.4.2-1.1+deb7u1
1.4.2-1.1+deb7u2
libssh2
Debian:8
 before 1.4.3-4.1+deb8u1, plus listed versions
1.4.3-4.1
1.4.3-4.1+deb8u1
libssh2
Mageia:5
 before 1.4.3-6.1.mga5
1.4.3-6.1.mga5
libssh2
Red Hat:enterprise_linux:6::client
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
Show 45 moreShow less
Affected packages
PackageAffectedFixed
libssh2-devel
Red Hat:enterprise_linux:6::client
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-docs
Red Hat:enterprise_linux:6::client
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-docs
Red Hat:enterprise_linux:6::computenode
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2
Red Hat:enterprise_linux:6::server
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-devel
Red Hat:enterprise_linux:6::server
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-docs
Red Hat:enterprise_linux:6::server
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2-docs
Red Hat:enterprise_linux:6::workstation
 before 0:1.4.2-2.el6_7.1
0:1.4.2-2.el6_7.1
libssh2
Red Hat:enterprise_linux:7::client
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-devel
Red Hat:enterprise_linux:7::client
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-docs
Red Hat:enterprise_linux:7::client
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2
Red Hat:enterprise_linux:7::computenode
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-docs
Red Hat:enterprise_linux:7::computenode
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2
Red Hat:enterprise_linux:7::server
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-devel
Red Hat:enterprise_linux:7::server
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-docs
Red Hat:enterprise_linux:7::server
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2
Red Hat:enterprise_linux:7::workstation
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2-docs
Red Hat:enterprise_linux:7::workstation
 before 0:1.4.3-10.el7_2.1
0:1.4.3-10.el7_2.1
libssh2_org
SUSE:Linux Enterprise Desktop 12
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Desktop 12 SP1
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Software Development Kit 12
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Server 12
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Server 12 SP1
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.4.3-16.1
1.4.3-16.1
libssh2_org
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.2.9-4.2.6.1
1.2.9-4.2.6.1
libssh2_org
SUSE:Linux Enterprise Desktop 11 SP4
 before 1.2.9-4.2.6.1
1.2.9-4.2.6.1
libssh2_org
SUSE:Linux Enterprise Server 11 SP4
 before 1.2.9-4.2.6.1
1.2.9-4.2.6.1
libssh2_org
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 1.2.9-4.2.6.1
1.2.9-4.2.6.1
libssh2
Ubuntu:14.04:LTS
 before 1.4.3-2ubuntu0.1, plus listed versions
1.4.3-11.4.3-2
1.4.3-2ubuntu0.1
libssh2
Ubuntu:16.04:LTS
 before 1.5.0-2ubuntu0.1, plus listed versions
1.5.0-2
1.5.0-2ubuntu0.1
libssh2_org
openSUSE:Tumbleweed
 before 1.7.0-1.5
1.7.0-1.5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 173 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open