← Back

CVE-2026-59847

nvd nist
Published: Jul 21, 2026Modified: Sep 4, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

Affected (6)

Libssh
1 product
Libssh
Redhat
2 products
Enterprise Linux
Hardened Images
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Libssh
Libssh
From 0.9.0 to 0.11.5
Libssh
Version 0.12.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 10.0
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0
Hardened Images
All versions

Related CWEs

CWE-1310
Missing Ability to Patch ROM Code
Missing an ability to patch ROM code may leave a System or System-on-Chip (SoC) in a vulnerable state.
CWE-253
Incorrect Check of Function Return Value
The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.

References (6)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingThird Party Advisory

Timeline

No history available yet.