Threats Tagged 'cve-2026-59846'

A stack-based buffer overflow vulnerability (CVE-2026-15370) was found in libssh during SFTP server directory listing. The flaw occurs because the longname field is constructed with unsafe concatenation into a fixed-size stack buffer, allowing attacker-controlled filenames of sufficient length to overflow the buffer. This can lead to server crashes or potential code execution. Red Hat has released an update for libssh in their Hardened Images RPMs to address this issue. No workaround is available, so applying the update is necessary to mitigate the risk.

This update includes the following RPMs: libssh: * libssh-0.12.1-4.hum1 (aarch64, x86_64) * libssh-config-0.12.1-4.hum1 (noarch) * libssh-devel-0.12.1-4.hum1 (aarch64, x86_64) * libssh-0.12.1-4.hum1.src (src)

A vulnerability in libssh allows a malicious username expanded through %r in ProxyCommand handling to inject shell metacharacters. This can expose environment variables and cause unintended shell behavior. The flaw has a low CVSS score of 3.9 and requires local access with low privileges and user interaction. Red Hat has issued an update for Red Hat Hardened Images RPMs to address this issue.

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.