Libssh2 vulnerabilities

Products

• Libssh2 25

Newest

• libssh2 libssh2 Heap Buffer Overflow via ETM Cipher Negotiation CVE-2026-66035 Fix available 7.7 HighJuly 24, 2026
• libssh2 libssh2 Heap Out-of-Bounds Read via publickey subsystem CVE-2026-66034 Fix available 7.7 HighJuly 24, 2026
• libssh2 libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation CVE-2026-66033 Fix available 8.7 HighJuly 24, 2026
• libssh2 libssh2 Double-Free Heap Corruption via sftp_open() CVE-2026-66032 Fix available 8.7 HighJuly 24, 2026
• libssh2 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup CVE-2026-58051 Fix available 8.3 HighJune 28, 2026
• libssh2 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation CVE-2026-58050 Fix available 8.3 HighJune 28, 2026
• libssh2 libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c CVE-2025-15661 Fix available 8.3 HighJune 18, 2026
• libssh2 libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c CVE-2026-55200 Public exploitFix available 9.2 CriticalJune 17, 2026
• libssh2 libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler CVE-2026-55199 Fix available 8.2 HighJune 17, 2026
• libssh2, red hat enterprise linux 6, enterprise linux 7 +4 more +6 more libssh2 userauth.c userauth_password integer overflow CVE-2026-7598 Fix available 6.9 MediumMay 1, 2026
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to... CVE-2020-22218 Fix available 7.5 HighAugust 22, 2023
• libssh2, debian linux, fedoraproject fedora +10 more +12 more In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer... CVE-2019-17498 Public exploitFix available 8.1 HighOctober 21, 2019
• libssh2, debian linux, f5 traffix systems signaling delivery controller +4 more +6 more In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c... CVE-2019-13115 Public exploitFix available EPSS 11.7% 8.1 HighJuly 16, 2019
• libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 more A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive... CVE-2019-3863 Fix available 7.5 HighMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +5 more +7 more An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way... CVE-2019-3862 Fix available 7.3 HighMarch 19, 2019
• libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 more An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a... CVE-2019-3861 Fix available 5.0 MediumMarch 19, 2019
• libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 more An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with... CVE-2019-3860 Fix available 5.0 MediumMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +5 more +7 more An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require... CVE-2019-3859 Fix available 5.0 MediumMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +5 more +7 more An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP... CVE-2019-3858 Fix available 5.0 MediumMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +13 more +15 more An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... CVE-2019-3857 Fix available 7.5 HighMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +13 more +15 more An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2... CVE-2019-3856 Fix available 7.5 HighMarch 19, 2019
• libssh2, apple xcode, debian linux +14 more +16 more An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... CVE-2019-3855 Fix available 7.5 HighMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +1 more +3 more The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets... CVE-2016-0787 Fix available 5.9 MediumFebruary 23, 2016
• libssh2, debian linux, fedoraproject fedora +2 more The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of... CVE-2015-1782 Fix available 6.8 MediumMarch 9, 2015