Описание
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
Меры по смягчению последствий
Do not connect to untrusted SSH servers and do not use certificates until patched.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | libssh | Not affected | ||
| Red Hat Enterprise Linux 9 | libssh | Not affected | ||
| Red Hat Enterprise Linux 10 | libssh | Fixed | RHSA-2026:55855 | 17.08.2026 |
| Red Hat Hardened Images | libssh-main-0.12.1-4.hum1 | Fixed | RHSA-2026:42922 | 21.07.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
3.1 Low
CVSS3
Связанные уязвимости
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
A flaw was found in libssh. Logic errors in automatic certificate-base ...
EPSS
3.1 Low
CVSS3