CVE-2026-15370
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 5.9
Source: NVD
Description
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
Affected (20)
Products: Libssh: Libssh · Redhat: Enterprise Linux, Hardened Images, Enterprise Linux For Els, Enterprise Linux For Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Els, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Els, Enterprise Linux For Power Little Endian Eus
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 0.11.0 ≤ version < 0.11.5 | |
| Version 10.0 | |
| All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 | |
| Version 10.2 | |
| Version 10.2 | |
| Version 10.0 | |
| Version 10.2 | |
| Version 10.2 | |
| Version 10.0 | |
| Version 10.2 | |
| Version 10.2 |
References (4)
Source: secalert@redhat.com
Issue TrackingVendor Advisory
Timeline
No history available yet.