CVE-2026-59848
EUVD-2026-4625621.07.2026, 14:16
A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libssh | libssh | - |
| redhat | hardened_images | - |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libssh-config |
| ||||||||||||||||||||||
| libssh-devel |
| ||||||||||||||||||||||
| libssh4 |
| ||||||||||||||||||||||
| libssh4-32bit |
|
References