LI
Vendor
Libssh
45
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-59851 | LI Libssh Libssh | 8.8 | Jul 21 | Libssh: libssh: authentication bypass via missing gssapi principal check |
| CVE-2026-59850 | LI Libssh Libssh | 7.5 | Jul 21 | Libssh: libssh: use-after-free via data callbacks on closed channels |
| CVE-2026-59849 | LI Libssh Libssh | 7.5 | Jul 21 | Libssh: libssh: denial of service via automatic certificate authentication loop |
| CVE-2026-59848 | LI Libssh Libssh | 5.3 | Jul 21 | Libssh: libssh: denial of service via sftp responses with unknown request ids |
| CVE-2026-59847 | LI Libssh Libssh | 7.5 | Jul 21 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification |
| CVE-2026-59846 | LI Libssh Libssh | 3.9 | Jul 21 | Libssh: libssh: information disclosure via proxycommand %r username expansion |
| CVE-2026-59844 | LI Libssh Libssh | 6.5 | Jul 21 | Libssh: libssh: denial of service via oversized sftp read length |
| CVE-2026-59845 | LI Libssh Libssh | 5.9 | Jul 21 | Libssh: libssh: denial of service via unchecked proxycommand fork() failure |
| CVE-2026-59843 | LI Libssh Libssh | 6.5 | Jul 21 | Libssh: libssh: denial of service via zero advertised channel packet size |
| CVE-2026-59842 | LI Libssh Libssh | 5.3 | Jul 21 | Libssh: libssh: information disclosure via short gssapi curve25519 public key |
| CVE-2026-15370 | LI Libssh Libssh | 7.3 | Jul 21 | Libssh: libssh: stack buffer overflow in sftp server longname construction |
| CVE-2025-14821 | LI Libssh Libssh | 7.0 | Apr 7 | Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows |
| CVE-2026-0965 | LI Libssh Libssh | 3.3 | Mar 26 | Libssh: libssh: denial of service via improper configuration file handling |
| CVE-2026-0967 | LI Libssh Libssh | 5.5 | Mar 26 | Libssh: libssh: denial of service via inefficient regular expression processing |
| CVE-2026-0968 | LI Libssh Libssh | 3.1 | Mar 26 | Libssh: libssh: denial of service due to malformed sftp message |
| CVE-2026-0964 | LI Libssh Libssh | 6.3 | Mar 26 | Libssh: improper sanitation of paths received from scp servers |
| CVE-2026-0966 | LI Libssh Libssh | 8.2 | Mar 26 | Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() |
| CVE-2026-3731 | LI libssh Libssh | 7.5 | Mar 8 | libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds |
| CVE-2025-5449 | LI Libssh Libssh | 6.5 | Jul 25 | A flaw was found in the SFTP server message decoding logic of libssh |
| CVE-2025-8114 | LI Libssh Libssh | 4.7 | Jul 24 | A flaw was found in libssh, a library that implements the SSH protocol |
| CVE-2025-5987 | LI Libssh Libssh | 8.1 | Jul 7 | Libssh: invalid return code for chacha20 poly1305 with openssl backend |
| CVE-2025-5351 | LI Libssh Libssh | 6.5 | Jul 4 | A flaw was found in the key export functionality of libssh |
| CVE-2025-5372 | LI Libssh Libssh | 8.8 | Jul 4 | A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation |
| CVE-2025-5318 | LI Libssh Libssh | 5.4 | Jun 24 | A flaw was found in the libssh library in versions less than 0.11.2 |
| CVE-2023-6004 | LI Libssh Libssh | 4.8 | Jan 3 | A flaw was found in libssh |
| CVE-2023-6918 | LI Libssh Libssh | 5.3 | Dec 19 | A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends |
| CVE-2023-48795 | LI Libssh Libssh | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… |
| CVE-2023-3603 | LI Libssh Libssh | 6.5 | Jul 21 | A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions |
| CVE-2023-2283 | LI Libssh Libssh | 6.5 | May 26 | A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation… |
| CVE-2023-1667 | LI Libssh Libssh | 6.5 | May 26 | A NULL pointer dereference was found In libssh during re-keying with algorithm guessing |
| CVE-2021-3634 | LI Libssh Libssh | 6.5 | Aug 31 | A flaw has been found in libssh in versions prior to 0.9.6 |
| CVE-2020-16135 | LI Libssh Libssh | 5.9 | Jul 29 | libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL |
| CVE-2020-1730 | LI Libssh Libssh | 5.3 | Apr 13 | A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers |
| CVE-2019-14889 | LI Libssh Libssh | 8.8 | Dec 10 | A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8 |
| CVE-2018-10933 | LI Libssh Libssh | 9.1 | Oct 17 | A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 |
| CVE-2016-0739 | LI Libssh Libssh | 5.9 | Apr 13 | libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes… |
| CVE-2015-3146 | LI Libssh Libssh | 7.5 | Apr 13 | The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a… |
| CVE-2014-8132 | LI Libssh Libssh | – | Dec 29 | Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted… |
| CVE-2014-0017 | LI Libssh Libssh | – | Mar 14 | The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the… |
| CVE-2013-0176 | LI Libssh Libssh | – | Feb 5 | The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer… |
| CVE-2012-6063 | LI Libssh Libssh | – | Nov 30 | Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… |
| CVE-2012-4562 | LI Libssh Libssh | – | Nov 30 | Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified… |
| CVE-2012-4561 | LI Libssh Libssh | – | Nov 30 | The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an… |
| CVE-2012-4560 | LI Libssh Libssh | – | Nov 30 | Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors |
| CVE-2012-4559 | LI Libssh Libssh | – | Nov 30 | Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4)… |