Threats Tagged 'cve-2026-59845'

This Red Hat security advisory addresses multiple vulnerabilities in libssh, including a stack buffer overflow in the SFTP server longname construction (CVE-2026-15370) and several denial of service issues, information disclosure, integrity downgrade, and use-after-free vulnerabilities. The update to libssh version 0.12.2-1.hum1 fixes these issues and includes various bug fixes and enhancements. The advisory applies to Red Hat Hardened Images RPMs and related packages. No known exploits in the wild have been reported.

Multiple security vulnerabilities were found and fixed in libssh, including a critical stack buffer overflow in the SFTP server's longname construction. This flaw allows attackers to cause buffer overflows by listing attacker-controlled filenames, potentially leading to crashes or code execution. Other issues include denial of service, information disclosure, integrity downgrade, and use-after-free vulnerabilities. Red Hat released updated packages (libssh-0.12.2-1.hum1) that address these issues. No workaround exists for the critical buffer overflow, so applying the update is necessary.

This update includes the following RPMs: libssh: * libssh-0.12.1-4.hum1 (aarch64, x86_64) * libssh-config-0.12.1-4.hum1 (noarch) * libssh-devel-0.12.1-4.hum1 (aarch64, x86_64) * libssh-0.12.1-4.hum1.src (src)

A vulnerability in libssh affects the ProxyCommand feature, where an unchecked fork() failure can be recorded as process ID -1. During cleanup, this can cause signals to be sent across the caller's accessible process tree, resulting in a local denial of service. This issue impacts environments using ProxyCommand in libssh client configurations.

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.