Browse CVEs

HIGH 7.5 CVE-2026-3731 A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the … Libssh after 0.11.3 Fix from $1,9502026-03-08 MEDIUM 6.5 CVE-2025-5449 A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer… Libssh Patch available Fix from $1,6002025-07-25 HIGH 8.1 CVE-2025-5987 A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is n… Libssh 0.11.2+ Fix from $1,9502025-07-07 MEDIUM 6.5 CVE-2023-3603 A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can re… Libssh 0.8.9+ Fix from $1,6002023-07-21 HIGH 7.5 CVE-2012-4560EPSS 6% Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via u… Libssh after 0.5.2 Fix from $1,9502012-11-30 HIGH 7.5 CVE-2012-4562EPSS 13% Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute a… Libssh after 0.5.2 Fix from $1,9502012-11-30 HIGH 7.5 CVE-2012-6063 Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) an… Libssh after 0.5.2 Fix from $1,9502012-11-30 MEDIUM 6.8 CVE-2012-4559EPSS 5% Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pub… Libssh after 0.5.2 Fix from $1,6002012-11-30 MEDIUM 5.0 CVE-2012-4561 The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in li… Libssh after 0.5.2 Fix from $1,6002012-11-30