Libssh vulnerabilities

Products

• Libssh 45

Newest

• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: authentication bypass via missing gssapi principal check CVE-2026-59851 Fix available 8.8 HighJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: use-after-free via data callbacks on closed channels CVE-2026-59850 Fix available 4.3 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 more Libssh: libssh: denial of service via automatic certificate authentication loop CVE-2026-59849 Fix available 3.1 LowJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: denial of service via sftp responses with unknown request ids CVE-2026-59848 Fix available 5.3 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification CVE-2026-59847 Fix available 5.9 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: information disclosure via proxycommand %r username expansion CVE-2026-59846 Fix available 3.9 LowJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: denial of service via oversized sftp read length CVE-2026-59844 Fix available 6.5 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: denial of service via unchecked proxycommand fork() failure CVE-2026-59845 Fix available 5.3 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more Libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 Fix available 6.5 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 more Libssh: libssh: information disclosure via short gssapi curve25519 public key CVE-2026-59842 Fix available 3.7 LowJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 more Libssh: libssh: stack buffer overflow in sftp server longname construction CVE-2026-15370 Fix available 6.7 MediumJuly 21, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows CVE-2025-14821 Fix available 7.8 HighMarch 13, 2026
• libssh libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds CVE-2026-3731 Fix available 6.9 MediumMarch 8, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libssh: libssh: denial of service due to malformed sftp message CVE-2026-0968 Fix available 3.1 LowFebruary 13, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libssh: libssh: denial of service via inefficient regular expression processing CVE-2026-0967 Fix available 2.2 LowFebruary 13, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() CVE-2026-0966 Fix available 6.5 MediumFebruary 13, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libssh: libssh: denial of service via improper configuration file handling CVE-2026-0965 Fix available 3.3 LowFebruary 13, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Libssh: improper sanitation of paths received from scp servers CVE-2026-0964 Fix available 5.0 MediumFebruary 13, 2026
• libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libssh: null pointer dereference in libssh kex session id calculation CVE-2025-8114 Fix available 4.7 MediumJuly 24, 2025
• libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more Libssh: invalid return code for chacha20 poly1305 with openssl backend CVE-2025-5987 Fix available 8.1 HighJune 25, 2025
• libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service CVE-2025-5449 Fix available 6.5 MediumJune 25, 2025
• libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 more Libssh: incorrect return code handling in ssh_kdf() in libssh CVE-2025-5372 Fix available 5.0 MediumJune 25, 2025
• libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more Libssh: double free vulnerability in libssh key export functions CVE-2025-5351 Fix available 6.5 MediumJune 25, 2025
• libssh, red hat ai inference server 3.2, enterprise linux 10 +26 more +28 more Libssh: out-of-bounds read in sftp_handle() CVE-2025-5318 Fix available 5.4 MediumJune 24, 2025
• libssh, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 more Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname CVE-2023-6004 Fix available 4.8 MediumDecember 19, 2023
• libssh, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Libssh: missing checks for return values for digests CVE-2023-6918 Fix available 3.7 LowDecember 18, 2023
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• fedora extra packages for enterprise linux 7, fedora, libssh +3 more +5 more Processing sftp server read may cause null dereference CVE-2023-3603 3.1 LowJuly 21, 2023
• libssh, fedoraproject fedora, redhat enterprise linux +2 more A vulnerability was found in libssh, where the authentication check of the connecting client can... CVE-2023-2283 Fix available 6.5 MediumMay 9, 2023
• libssh, debian linux, fedoraproject fedora +1 more +3 more A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This... CVE-2023-1667 Fix available 6.5 MediumMay 9, 2023
• libssh, debian linux, fedoraproject fedora +4 more +6 more A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two... CVE-2021-3634 Fix available 6.5 MediumAugust 26, 2021
• libssh, canonical ubuntu linux, debian linux +2 more +4 more libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. CVE-2020-16135 Fix available 5.9 MediumJuly 29, 2020
• libssh, canonical ubuntu linux, fedoraproject fedora +3 more +5 more A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR ... CVE-2020-1730 Fix available 5.3 MediumApril 9, 2020
• libssh, canonical ubuntu linux, debian linux +3 more +5 more A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0... CVE-2019-14889 Fix available 7.1 HighDecember 10, 2019
• [unknown] libssh, canonical ubuntu linux, debian linux +6 more +8 more A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.... CVE-2018-10933 Public exploitFix available EPSS 91.8% 9.1 CriticalOctober 16, 2018
• libssh, canonical ubuntu linux, debian linux +2 more +4 more libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman... CVE-2016-0739 Fix available 5.9 MediumFebruary 23, 2016
• libssh, canonical ubuntu linux, debian linux +1 more +3 more The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh... CVE-2015-3146 Fix available 7.5 HighMay 5, 2015
• libssh, canonical ubuntu linux, debian linux +2 more +4 more Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x... CVE-2014-8132 Fix available 5.0 MediumDecember 28, 2014
• libssh The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset... CVE-2014-0017 Fix available 1.9 LowMarch 5, 2014
• libssh The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched... CVE-2013-0176 Fix available 4.3 MediumFebruary 5, 2013
• libssh Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows... CVE-2012-6063 Fix available 7.5 HighNovember 30, 2012
• libssh Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of... CVE-2012-4562 Fix available EPSS 12.8% 7.5 HighNovember 30, 2012
• libssh The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign,... CVE-2012-4561 Fix available 5.0 MediumNovember 30, 2012
• libssh Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of... CVE-2012-4560 Fix available 7.5 HighNovember 30, 2012
• libssh Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2)... CVE-2012-4559 Fix available 6.8 MediumNovember 30, 2012