Количество 6
Количество 6
CVE-2026-0968
[Denial of Service due to malformed SFTP message]
CVE-2026-0968
A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes.
CVE-2026-0968
[Denial of Service due to malformed SFTP message]
GHSA-6w3m-r3qq-cr2h
A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes.
SUSE-SU-2026:0779-1
Security update for libssh
SUSE-SU-2026:0778-1
Security update for libssh
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-0968 [Denial of Service due to malformed SFTP message] | около 2 месяцев назад | ||
 | CVE-2026-0968 A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes. | CVSS3: 3.1 | около 2 месяцев назад | |
| CVE-2026-0968 [Denial of Service due to malformed SFTP message] | - | ||
| GHSA-6w3m-r3qq-cr2h A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes. | CVSS3: 3.1 | 4 дня назад | |
 | SUSE-SU-2026:0779-1 Security update for libssh | 28 дней назад | ||
| SUSE-SU-2026:0778-1 Security update for libssh | 28 дней назад |
Уязвимостей на страницу