← Back

CVE-2026-59844

nvd nist
Published: Jul 21, 2026Modified: Sep 1, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: secalert@redhat.com (Secondary)

Description

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.

Affected (5)

Libssh
1 product
Libssh
Redhat
2 products
Enterprise Linux
Hardened Images
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Libssh
All versions
Redhat
Enterprise Linux
Version 10.0
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0
Hardened Images
All versions

Related CWEs

CWE-789
Memory Allocation with Excessive Size Value
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (6)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Issue TrackingVendor Advisory

Timeline

No history available yet.