CVE-2026-59849

Опубликовано: 21 июл. 2026

Источник: nvd

CVSS3: 3.1

CVSS3: 7.5

EPSS Низкий

Описание

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.

Ссылки

https://access.redhat.com/errata/RHSA-2026:42922
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:55855
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-59849
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2498182
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*

Версия от 0.11.0 (включая) до 0.11.5 (исключая)

cpe:2.3:a:libssh:libssh:0.12.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_eus:10.2:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux_for_eus:10.2:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:10.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:10.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.2:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00438

Низкий

3.1 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVE-2026-59849

CVSS3: 7.5

ubuntu

4 месяца назад

CVE-2026-59849

CVSS3: 3.1

redhat

4 месяца назад

CVE-2026-59849

CVSS3: 7.5

debian

4 месяца назад

A flaw was found in libssh. Logic errors in automatic certificate-base ...

ROS-20260907-80-0014

CVSS3: 7.5

redos

2 месяца назад

Уязвимость libssh

ROS-20260907-73-0014

CVSS3: 7.5

redos

2 месяца назад

Уязвимость libssh

EPSS

Процентиль: 38%

0.00438

Низкий

3.1 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-835