6.9
Medium
CVE-2026-7598 A security vulnerability has been detected in libssh2 up to 1.11.1
Description
A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libssh2 1.11 | 1.11.0 → 1.11.1 | No fix stated |
| Red Hat Hardened Images 1.11 | earliest → < 1.11.1-5.1.hum1 | 1.11.1-5.1.hum1 |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Trusted Profile Analyzer | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift Update Service | Versions not published |
References
- VDB-360555 | libssh2 userauth.c userauth_password integer overflow vuldb.com
- VDB-360555 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #805564 | libssh2 <= 1.11.1 Integer Overflow vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified