Most severe vulnerabilities for "libssh2 libssh2" 1.11.1

Where

AND

Sort:

libssh2 libssh2libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

Risk 92

Severity

9.2

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 30 June 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2026-55200

libssh2 libssh2libssh2 Double-Free Heap Corruption via sftp_open()

Risk 77

Severity

8.7

Double Free

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 4 September 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2026-66032

libssh2 libssh2libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation

Risk 47

Severity

8.7

Integer Underflow

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 4 September 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2026-66033

libssh2 libssh2libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c

Risk 55

Severity

8.3

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Last updated 30 June 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2025-15661

libssh2 libssh2libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation

Risk 60

Severity

8.3

Integer Overflow, Buffer Overflow

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Last updated 13 July 2026

1 / 2

Source: Ubuntu

First published (updated )

CVE-2026-58050

libssh2 libssh2libssh2 - Free of Uninitialized Pointer in publickey List Cleanup

Risk 52

Severity

8.3

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Last updated 13 July 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2026-58051

libssh2 libssh2libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler

Risk 46

Severity

8.2

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 30 June 2026

1 / 3

Source: Ubuntu

First published (updated )

CVE-2026-55199

libssh2 libssh2libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

Risk 71

Severity

7.7

Buffer Overflow

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

1 / 2

Source: Microsoft

First published (updated )

CVE-2026-66035

libssh2 libssh2libssh2 Heap Out-of-Bounds Read via publickey subsystem

Risk 71

Severity

7.7

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

libssh2 Heap Out-of-Bounds Read via publickey subsystem

1 / 2

Source: Microsoft

First published (updated )

CVE-2026-66034

libssh2 libssh2libssh2 userauth.c userauth_password integer overflow

Risk 47

Severity

6.9

EPSS

0.07%

Integer Overflow

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.

1 / 3

Source: MITRE

First published (updated )

CVE-2026-7598

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact