LI
Product
Libssh
45
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 21Low 3
Watch
Add Libssh to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10933 | 9.1 | Oct 17 | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 Affected: 0.6.0 before 0.7.6; 0.8.0 before 0.8.4 |
| CVE-2026-59851 | 8.8 | Jul 21 | Libssh: libssh: authentication bypass via missing gssapi principal check Affected: All versions, or not specified |
| CVE-2025-5372 | 8.8 | Jul 4 | A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation Affected: before 0.11.2 |
| CVE-2019-14889 | 8.8 | Dec 10 | A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8 Affected: before 0.8.8; 0.9.0 before 0.9.3 |
| CVE-2026-0966 | 8.2 | Mar 26 | Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() Affected: before 0.11.4 |
| CVE-2025-5987 | 8.1 | Jul 7 | Libssh: invalid return code for chacha20 poly1305 with openssl backend Affected: 0.10.0 before 0.11.2 |
| CVE-2026-59850 | 7.5 | Jul 21 | Libssh: libssh: use-after-free via data callbacks on closed channels Affected: All versions, or not specified |
| CVE-2026-59849 | 7.5 | Jul 21 | Libssh: libssh: denial of service via automatic certificate authentication loop Affected: 0.11.0 before 0.11.5; 0.12.0 |
| CVE-2026-59847 | 7.5 | Jul 21 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification Affected: 0.9.0 before 0.11.5; 0.12.0 |
| CVE-2026-3731 | 7.5 | Mar 8 | A weakness has been identified in libssh up to 0.11.3 Affected: through 0.11.3 |
| CVE-2015-3146 | 7.5 | Apr 13 | The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a… Affected: through 0.6.4 |
| CVE-2026-15370 | 7.3 | Jul 21 | Libssh: libssh: stack buffer overflow in sftp server longname construction Affected: 0.11.0 before 0.11.5; 0.12.0 |
| CVE-2025-14821 | 7.0 | Apr 7 | Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows Affected: before 0.12.0 |
| CVE-2026-59844 | 6.5 | Jul 21 | Libssh: libssh: denial of service via oversized sftp read length Affected: All versions, or not specified |
| CVE-2026-59843 | 6.5 | Jul 21 | Libssh: libssh: denial of service via zero advertised channel packet size Affected: All versions, or not specified |
| CVE-2025-5449 | 6.5 | Jul 25 | A flaw was found in the SFTP server message decoding logic of libssh Affected: 0.11.0; 0.11.1 |
| CVE-2025-5351 | 6.5 | Jul 4 | A flaw was found in the key export functionality of libssh Affected: 0.10.0 before 0.11.2 |
| CVE-2023-3603 | 6.5 | Jul 21 | A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions Affected: before 0.8.9 |
| CVE-2023-2283 | 6.5 | May 26 | A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation… Affected: 0.9.1 through 0.9.6; 0.10.0 through 0.10.4 |
| CVE-2023-1667 | 6.5 | May 26 | A NULL pointer dereference was found In libssh during re-keying with algorithm guessing Affected: 0.9.1 through 0.9.6; 0.10.0 through 0.10.4 |
| CVE-2021-3634 | 6.5 | Aug 31 | A flaw has been found in libssh in versions prior to 0.9.6 Affected: 0.9.1 before 0.9.6 |
| CVE-2026-0964 | 6.3 | Mar 26 | Libssh: improper sanitation of paths received from scp servers Affected: before 0.11.4 |
| CVE-2026-59845 | 5.9 | Jul 21 | Libssh: libssh: denial of service via unchecked proxycommand fork() failure Affected: All versions, or not specified |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 0.10.6 |
| CVE-2020-16135 | 5.9 | Jul 29 | libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL Affected: 0.9.4 |
| CVE-2016-0739 | 5.9 | Apr 13 | libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes… Affected: through 0.7.2 |
| CVE-2026-0967 | 5.5 | Mar 26 | Libssh: libssh: denial of service via inefficient regular expression processing Affected: through 0.11.3 |
| CVE-2025-5318 | 5.4 | Jun 24 | A flaw was found in the libssh library in versions less than 0.11.2 Affected: before 0.11.2 |
| CVE-2026-59848 | 5.3 | Jul 21 | Libssh: libssh: denial of service via sftp responses with unknown request ids Affected: All versions, or not specified |
| CVE-2026-59842 | 5.3 | Jul 21 | Libssh: libssh: information disclosure via short gssapi curve25519 public key Affected: 0.12.0 |
| CVE-2023-6918 | 5.3 | Dec 19 | A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends Affected: 0.9.0 before 0.9.8; 0.10.0 before 0.10.6 |
| CVE-2020-1730 | 5.3 | Apr 13 | A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers Affected: 0.8.0 before 0.8.9; 0.9.0 before 0.9.4 |
| CVE-2023-6004 | 4.8 | Jan 3 | A flaw was found in libssh Affected: 0.8.0 before 0.9.8; 0.10.0 before 0.10.6 |
| CVE-2025-8114 | 4.7 | Jul 24 | A flaw was found in libssh, a library that implements the SSH protocol Affected: through 0.11.2 |
| CVE-2026-59846 | 3.9 | Jul 21 | Libssh: libssh: information disclosure via proxycommand %r username expansion Affected: All versions, or not specified |
| CVE-2026-0965 | 3.3 | Mar 26 | Libssh: libssh: denial of service via improper configuration file handling Affected: through 0.11.3 |
| CVE-2026-0968 | 3.1 | Mar 26 | Libssh: libssh: denial of service due to malformed sftp message Affected: through 0.11.3 |
| CVE-2014-8132 | – | Dec 29 | Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted… Affected: 0.5.0; 0.5.2; 0.5.3; 0.5.4; 0.5.5; 0.6.0; +3 more |
| CVE-2014-0017 | – | Mar 14 | The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the… Affected: through 0.6.2; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1; +6 more |
| CVE-2013-0176 | – | Feb 5 | The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer… Affected: through 0.5.3; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1; +1 more |
| CVE-2012-6063 | – | Nov 30 | Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Affected: through 0.5.2; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1 |
| CVE-2012-4562 | – | Nov 30 | Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified… Affected: through 0.5.2; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1 |
| CVE-2012-4561 | – | Nov 30 | The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an… Affected: through 0.5.2; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1 |
| CVE-2012-4560 | – | Nov 30 | Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors Affected: through 0.5.2; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1 |
| CVE-2012-4559 | – | Nov 30 | Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4)… Affected: through 0.5.2; 0.4.7; 0.4.8; 0.5.0; 0.5.0; 0.5.1 |
Showing 45