Libssh: libssh: authentication bypass via missing gssapi principal check

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Libssh: libssh: use-after-free via data callbacks on closed channels

Libssh: libssh: denial of service via automatic certificate authentication loop

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a…

Libssh: libssh: stack buffer overflow in sftp server longname construction

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows