6.9
Moyenne
CVE-2026-7598 A security vulnerability has been detected in libssh2 up to 1.11.1
Description
A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libssh2 1.11 | 1.11.0 → 1.11.1 | Pas de correctif indiqué |
| Red Hat Hardened Images 1.11 | premières → < 1.11.1-5.1.hum1 | 1.11.1-5.1.hum1 |
| Red Hat Enterprise Linux 6 | Versions non publiées | |
| Red Hat Enterprise Linux 7 | Versions non publiées | |
| Red Hat Trusted Profile Analyzer | Versions non publiées | |
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat OpenShift Update Service | Versions non publiées |
Références
- VDB-360555 | libssh2 userauth.c userauth_password integer overflow vuldb.com
- VDB-360555 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #805564 | libssh2 <= 1.11.1 Integer Overflow vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification