Threats Tagged 'cve-2026-59844'

A stack-based buffer overflow vulnerability (CVE-2026-15370) was found in libssh during SFTP server directory listing. The flaw occurs because the longname field is constructed with unsafe concatenation into a fixed-size stack buffer, allowing attacker-controlled filenames of sufficient length to overflow the buffer. This can lead to server crashes or potential code execution. Red Hat has released an update for libssh in their Hardened Images RPMs to address this issue. No workaround is available, so applying the update is necessary to mitigate the risk.

This update includes the following RPMs: libssh: * libssh-0.12.1-4.hum1 (aarch64, x86_64) * libssh-config-0.12.1-4.hum1 (noarch) * libssh-devel-0.12.1-4.hum1 (aarch64, x86_64) * libssh-0.12.1-4.hum1.src (src)

A vulnerability in libssh allows a remote authenticated client to send SSH_FXP_READ requests with an arbitrarily large length, causing the SFTP server to allocate excessive memory. This can lead to memory exhaustion and denial of service through repeated requests. The issue is tracked as CVE-2026-59844 with a CVSS score of 6.5 (medium severity). Red Hat has released an update for libssh to address this flaw. No workaround is available, so applying the vendor's update is the recommended mitigation.

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.