Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-59850

Опубликовано: 21 июл. 2026
Источник: nvd
CVSS3: 4.3
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libssh:libssh:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%
0.00303
Низкий

4.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.3
ubuntu
12 дней назад

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

CVSS3: 4.3
redhat
12 дней назад

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

msrc
8 дней назад

Libssh: libssh: use-after-free via data callbacks on closed channels

CVSS3: 4.3
debian
12 дней назад

A flaw was found in libssh. If data packets are processed after a chan ...

CVSS3: 4.3
github
12 дней назад

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

EPSS

Процентиль: 23%
0.00303
Низкий

4.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-416