Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-66033
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs.
CVE-2026-66033
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs.
CVE-2026-66033
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs.
CVE-2026-66033
libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation
CVE-2026-66033
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authen ...
GHSA-2g8c-wcg8-r65c
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs.
ALT-PU-2026-12415
ALT-PU-2026-12415: package `libssh2` update to version 1.11.1-alt4
openSUSE-SU-2026:21549-1
Security update for libssh2_org
SUSE-SU-2026:4095-1
Security update for libssh2_org
SUSE-SU-2026:3541-1
Security update for libssh2_org
SUSE-SU-2026:3526-1
Security update for libssh2_org
SUSE-SU-2026:3525-1
Security update for libssh2_org
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-66033 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-66033 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs. | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-66033 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-66033 libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-66033 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authen ... | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| GHSA-2g8c-wcg8-r65c libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| ALT-PU-2026-12415 ALT-PU-2026-12415: package `libssh2` update to version 1.11.1-alt4 | CVSS3: 8.8 | 3 месяца назад | |
 | openSUSE-SU-2026:21549-1 Security update for libssh2_org | 3 месяца назад | ||
| SUSE-SU-2026:4095-1 Security update for libssh2_org | 2 месяца назад | ||
| SUSE-SU-2026:3541-1 Security update for libssh2_org | 3 месяца назад | ||
| SUSE-SU-2026:3526-1 Security update for libssh2_org | 3 месяца назад | ||
| SUSE-SU-2026:3525-1 Security update for libssh2_org | 3 месяца назад |
Уязвимостей на страницу