LI
Vendor
libssh2
25
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-66035 | LI libssh2 libssh2 | 7.5 | Jul 24 | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation |
| CVE-2026-66034 | LI libssh2 libssh2 | 7.5 | Jul 24 | libssh2 Heap Out-of-Bounds Read via publickey subsystem |
| CVE-2026-66033 | LI libssh2 libssh2 | 7.5 | Jul 24 | libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation |
| CVE-2026-66032 | LI libssh2 libssh2 | 8.8 | Jul 24 | libssh2 Double-Free Heap Corruption via sftp_open() |
| CVE-2026-58051 | LI libssh2 libssh2 | 6.5 | Jun 28 | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup |
| CVE-2026-58050 | LI libssh2 libssh2 | 7.5 | Jun 28 | libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation |
| CVE-2025-15661 | LI libssh2 libssh2 | 6.5 | Jun 18 | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c |
| CVE-2026-55200 | LI libssh2 libssh2 | 8.3 | Jun 17 | libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c |
| CVE-2026-55199 | LI libssh2 libssh2 | 7.5 | Jun 17 | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler |
| CVE-2026-7598 | LI libssh2 Libssh2 | 7.3 | May 1 | libssh2 userauth.c userauth_password integer overflow |
| CVE-2023-48795 | LI Libssh2 Libssh2 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… |
| CVE-2020-22218 | LI Libssh2 Libssh2 | 7.5 | Aug 22 | An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory |
| CVE-2019-17498 | LI Libssh2 Libssh2 | 8.1 | Oct 21 | In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary… |
| CVE-2019-13115 | LI Libssh2 Libssh2 | 8.1 | Jul 16 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets… |
| CVE-2019-3856 | LI Libssh2 Libssh2 | 8.8 | Mar 25 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed |
| CVE-2019-3857 | LI Libssh2 Libssh2 | 8.8 | Mar 25 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are… |
| CVE-2019-3860 | LI Libssh2 Libssh2 | 9.1 | Mar 25 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed |
| CVE-2019-3861 | LI Libssh2 Libssh2 | 9.1 | Mar 25 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed |
| CVE-2019-3863 | LI Libssh2 Libssh2 | 8.8 | Mar 25 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side |
| CVE-2019-3858 | LI Libssh2 Libssh2 | 9.1 | Mar 21 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server |
| CVE-2019-3855 | LI Libssh2 Libssh2 | 8.8 | Mar 21 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server |
| CVE-2019-3862 | LI Libssh2 Libssh2 | 9.1 | Mar 20 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed |
| CVE-2019-3859 | LI Libssh2 Libssh2 | 9.1 | Mar 20 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions |
| CVE-2016-0787 | LI Libssh2 Libssh2 | 5.9 | Apr 13 | The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to… |
| CVE-2015-1782 | LI Libssh2 Libssh2 | – | Mar 13 | The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an… |