CVE-2026-59849
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
Affected (20)
Products: Libssh: Libssh · Redhat: Enterprise Linux, Hardened Images, Enterprise Linux For Els, Enterprise Linux For Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Els, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Els, Enterprise Linux For Power Little Endian Eus
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 0.11.0 ≤ version < 0.11.5 | |
| Version 10.0 | |
| All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 | |
| Version 10.2 | |
| Version 10.2 | |
| Version 10.0 | |
| Version 10.2 | |
| Version 10.2 | |
| Version 10.0 | |
| Version 10.2 | |
| Version 10.2 |
References (4)
Source: secalert@redhat.com
Issue TrackingVendor Advisory
Timeline
No history available yet.