CVE-2026-0968
3.1 LOWA flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longnam...
Published: 2026-03-26 · Last updated: 2026-05-19
Severity and scoring
- CVSS
- 3.1 LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- CWE
- CWE-476
Affected products
| Vendor | Product |
|---|---|
| libssh | enterprise_linux, libssh |
| redhat | enterprise_linux, libssh |
Description
A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-0968
- [Other]https://access.redhat.com/errata/RHSA-2026:18160
- [Other]https://access.redhat.com/errata/RHSA-2026:18683
- [Other]https://access.redhat.com/security/cve/CVE-2026-0968
- [Other]https://bugzilla.redhat.com/show_bug.cgi?id=2436982
- [Other]https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/
Related CVEs
Same vendor
- CVE-2026-50259 — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland (7.8 HIGH)
- CVE-2026-50258 — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland (7.8 HIGH)
- CVE-2026-50257 — A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence() (7.8 HIGH)
- CVE-2026-50256 — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland (7.8 HIGH)
- CVE-2026-1784 — The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy (8.8 HIGH)
Same CWE
- CVE-2026-53463 — ImageMagick is free and open-source software used for editing and manipulating digital images (4.3 MEDIUM)
- CVE-2026-24716 — A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
- CVE-2026-22899 — A NULL pointer dereference vulnerability has been reported to affect File Station 6
- CVE-2025-66281 — A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions
- CVE-2025-62850 — A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions