Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libssh HIGH 7.5
CVE-2026-3731

A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the …

Fix: after 0.11.3
Fix from $1,950 2026-03-08
Libssh MEDIUM 6.5
CVE-2025-5449

A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer…

Patch available
Fix from $1,600 2025-07-25
Libssh HIGH 8.1
CVE-2025-5987

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is n…

Fix: 0.11.2+
Fix from $1,950 2025-07-07
Libssh MEDIUM 6.5
CVE-2023-3603

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can re…

Fix: 0.8.9+
Fix from $1,600 2023-07-21
Libssh HIGH 7.5
CVE-2012-4560EPSS 6%

Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via u…

Fix: after 0.5.2
Fix from $1,950 2012-11-30
Libssh HIGH 7.5
CVE-2012-4562EPSS 13%

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute a…

Fix: after 0.5.2
Fix from $1,950 2012-11-30
Libssh HIGH 7.5
CVE-2012-6063

Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) an…

Fix: after 0.5.2
Fix from $1,950 2012-11-30
Libssh MEDIUM 6.8
CVE-2012-4559EPSS 5%

Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pub…

Fix: after 0.5.2
Fix from $1,600 2012-11-30
Libssh MEDIUM 5.0
CVE-2012-4561

The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in li…

Fix: after 0.5.2
Fix from $1,600 2012-11-30