Advisories · Technology
libssh.
Every CVE that names libssh among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds
- libssh
- Memory corruption
- CVSS 6.5 Medium
Libssh: double free vulnerability in libssh key export functions
- libssh
- Red Hat Enterprise Linux 9
- Memory corruption
- CVSS 5.0 Medium
Libssh: incorrect return code handling in ssh_kdf() in libssh
- libssh
- Red Hat Enterprise Linux 8
- CWE-682
- CVSS 3.1 Low
Processing sftp server read may cause null dereference
- libssh
- Red Hat Enterprise Linux 7
- Memory corruption
-
Improper authentication in libssh
- libssh
- Authentication bypass
-
NULL pointer dereference in libssh
- libssh
- Memory corruption
-
Out-of-bounds write in libssh
- libssh
- Memory corruption