Threats Tagged 'cve-2026-59850'

This Red Hat security advisory addresses multiple vulnerabilities in libssh, including a stack buffer overflow in the SFTP server longname construction (CVE-2026-15370) and several denial of service issues, information disclosure, integrity downgrade, and use-after-free vulnerabilities. The update to libssh version 0.12.2-1.hum1 fixes these issues and includes various bug fixes and enhancements. The advisory applies to Red Hat Hardened Images RPMs and related packages. No known exploits in the wild have been reported.

Multiple security vulnerabilities were found and fixed in libssh, including a critical stack buffer overflow in the SFTP server's longname construction. This flaw allows attackers to cause buffer overflows by listing attacker-controlled filenames, potentially leading to crashes or code execution. Other issues include denial of service, information disclosure, integrity downgrade, and use-after-free vulnerabilities. Red Hat released updated packages (libssh-0.12.2-1.hum1) that address these issues. No workaround exists for the critical buffer overflow, so applying the update is necessary.

This update includes the following RPMs: libssh: * libssh-0.12.1-4.hum1 (aarch64, x86_64) * libssh-config-0.12.1-4.hum1 (noarch) * libssh-devel-0.12.1-4.hum1 (aarch64, x86_64) * libssh-0.12.1-4.hum1.src (src)

A use-after-free vulnerability was found in libssh where data callbacks may be invoked after the associated data has been freed if data packets are processed after a channel is closed. This can lead to crashes or potential use-after-free conditions affecting availability.

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.