Threats Tagged 'cve-2026-59842'

A stack-based buffer overflow vulnerability (CVE-2026-15370) was found in libssh during SFTP server directory listing. The flaw occurs because the longname field is constructed with unsafe concatenation into a fixed-size stack buffer, allowing attacker-controlled filenames of sufficient length to overflow the buffer. This can lead to server crashes or potential code execution. Red Hat has released an update for libssh in their Hardened Images RPMs to address this issue. No workaround is available, so applying the update is necessary to mitigate the risk.

This update includes the following RPMs: libssh: * libssh-0.12.1-4.hum1 (aarch64, x86_64) * libssh-config-0.12.1-4.hum1 (noarch) * libssh-devel-0.12.1-4.hum1 (aarch64, x86_64) * libssh-0.12.1-4.hum1.src (src)

A vulnerability in libssh allows a remote unauthenticated attacker to cause an out-of-bounds heap read during server-side GSSAPI key exchange by supplying a Curve25519 public key shorter than expected. This flaw can lead to disclosure of small amounts of server memory. The issue is tracked as CVE-2026-59842 and has a low severity rating with a CVSS score of 3.7. Red Hat has released updates for libssh packages to address this vulnerability. Mitigations include disabling GSSAPIKeyExchange or removing the gss-curve25519-sha256- algorithm from GSSAPIKexAlgorithms if appropriate.

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.