CVE-2026-15370: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 10
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
AI Analysis
Technical Summary
CVE-2026-15370 is a stack-based buffer overflow vulnerability in libssh as used in Red Hat Hardened Images. The vulnerability arises during SFTP server directory listing when the longname field is constructed by unsafe concatenation into a fixed-size stack buffer. If an attacker causes the server to list filenames under their control with sufficiently long names, this can overflow the stack buffer, potentially causing crashes or enabling code execution on the server. Red Hat published an advisory (RHSA-2026:47768) providing updated libssh RPMs (libssh-0.12.2-1.hum1) that fix this issue.
Potential Impact
The vulnerability can lead to denial of service (server crashes) or potentially allow code execution on the affected server. The CVSS 3.1 base score is 6.7 (medium severity) with high impact on confidentiality, integrity, and availability. Exploitation requires local access with low privileges and user interaction, and the attack complexity is high.
Mitigation Recommendations
Red Hat has released an official security update for Red Hat Hardened Images that includes libssh version 0.12.2-1.hum1, which fixes this vulnerability. Users should apply this update promptly. No other mitigation or workaround is indicated in the vendor advisory. Patch status: official fix available.
CVE-2026-15370: Stack-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 10
Description
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
CVSS v3.1
Score 6.7medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-15370 is a stack-based buffer overflow vulnerability in libssh as used in Red Hat Hardened Images. The vulnerability arises during SFTP server directory listing when the longname field is constructed by unsafe concatenation into a fixed-size stack buffer. If an attacker causes the server to list filenames under their control with sufficiently long names, this can overflow the stack buffer, potentially causing crashes or enabling code execution on the server. Red Hat published an advisory (RHSA-2026:47768) providing updated libssh RPMs (libssh-0.12.2-1.hum1) that fix this issue.
Potential Impact
The vulnerability can lead to denial of service (server crashes) or potentially allow code execution on the affected server. The CVSS 3.1 base score is 6.7 (medium severity) with high impact on confidentiality, integrity, and availability. Exploitation requires local access with low privileges and user interaction, and the attack complexity is high.
Mitigation Recommendations
Red Hat has released an official security update for Red Hat Hardened Images that includes libssh version 0.12.2-1.hum1, which fixes this vulnerability. Users should apply this update promptly. No other mitigation or workaround is indicated in the vendor advisory. Patch status: official fix available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-10T08:14:26.583Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-15370","vendor":"Red Hat"}]
Threat ID: 6a5f3b7c2a4a8d5989e2aa79
Added to database: 07/21/2026, 09:27:24 UTC
Last enriched: 07/30/2026, 21:42:54 UTC
Last updated: 09/02/2026, 22:52:09 UTC
Views: 74
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.