Threats Tagged 'cve-2026-59847'

A stack-based buffer overflow vulnerability (CVE-2026-15370) was found in libssh during SFTP server directory listing. The flaw occurs because the longname field is constructed with unsafe concatenation into a fixed-size stack buffer, allowing attacker-controlled filenames of sufficient length to overflow the buffer. This can lead to server crashes or potential code execution. Red Hat has released an update for libssh in their Hardened Images RPMs to address this issue. No workaround is available, so applying the update is necessary to mitigate the risk.

This update includes the following RPMs: libssh: * libssh-0.12.1-4.hum1 (aarch64, x86_64) * libssh-config-0.12.1-4.hum1 (noarch) * libssh-devel-0.12.1-4.hum1 (aarch64, x86_64) * libssh-0.12.1-4.hum1.src (src)

CVE-2026-59847 is a medium severity vulnerability in libssh used by Red Hat Enterprise Linux 10. It involves incorrect AES-GCM finalization checks when using the OpenSSL backend, which can remove integrity protection and allow modification of plaintext data in transit without detection. Red Hat has issued an update for libssh to address this issue.

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.