Vulnerability-Lookup

CVE-2026-0965 (GCVE-0-2026-0965)

Vulnerability from cvelistv5 – Published: 2026-03-26 20:06 – Updated: 2026-09-01 12:10

Title

Libssh: libssh: denial of service via improper configuration file handling

Summary

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

Severity

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-30 11:31 UTC

CWE

CWE-73 - External Control of File Name or Path

Assigner

redhat redhat root

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:18160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18683	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-0965	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2436980	issue-trackingx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-2.el10 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-18.el9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Date Public

2026-02-10 18:47

Credits

Red Hat would like to thank Jakub Jelen (libssh) and Kang Yang for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0965",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-30T11:31:36.431851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-19T16:46:45.492Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-2.el10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-18.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-18.el9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "libssh2",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "libssh2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "libssh2",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Jakub Jelen (libssh) and Kang Yang for reporting this issue."
        }
      ],
      "datePublic": "2026-02-10T18:47:22.524Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T12:10:14.607Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:18160",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:18160"
        },
        {
          "name": "RHSA-2026:18683",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-0965"
        },
        {
          "name": "RHBZ#2436980",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436980"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-02-04T23:40:45.160Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-02-10T18:47:22.524Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: denial of service via improper configuration file handling",
      "workarounds": [
        {
          "lang": "en",
          "value": "Ensure the client and server are using only regular files as configuration."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-73: External Control of File Name or Path"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-0965",
    "datePublished": "2026-03-26T20:06:33.336Z",
    "dateReserved": "2026-01-14T21:54:51.315Z",
    "dateUpdated": "2026-09-01T12:10:14.607Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-0965",
      "date": "2026-09-16",
      "epss": "0.00158",
      "percentile": "0.05318"
    },
    "microsoft_vex": {
      "current_release_date": "2026-05-01T01:38:46.000Z",
      "cve": "CVE-2026-0965",
      "id": "msrc_CVE-2026-0965",
      "initial_release_date": "2026-03-02T00:00:00.000Z",
      "product_status:fixed": "4",
      "product_status:known_affected": "4",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Libssh: libssh: denial of service via improper configuration file handling",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-0965.json",
      "version": "7"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-0965\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-03-26T21:17:00.607\",\"lastModified\":\"2026-09-01T13:18:06.810\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 una falla en libssh donde puede intentar abrir archivos arbitrarios durante el an\u00e1lisis de la configuraci\u00f3n. Un atacante local puede explotar esto al proporcionar un archivo de configuraci\u00f3n malicioso o cuando el sistema est\u00e1 mal configurado. Esta vulnerabilidad podr\u00eda llevar a una denegaci\u00f3n de servicio (DoS) al hacer que el sistema intente acceder a archivos peligrosos, como dispositivos de bloque o archivos de sistema grandes, lo que puede interrumpir las operaciones normales.\"}],\"affected\":[{\"source\":\"secalert@redhat.com\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.12.0-2.el10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"],\"versions\":[{\"version\":\"0:0.10.4-18.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/o:redhat:enterprise_linux:9::baseos\"],\"versions\":[{\"version\":\"0:0.10.4-18.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libssh2\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/ose-rhel-coreos-8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/ose-rhel-coreos-9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]}]}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":3.3,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-30T11:31:36.431851Z\",\"id\":\"CVE-2026-0965\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-73\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.11.3\",\"matchCriteriaId\":\"2366D711-FD0B-4A04-92BA-DE6DA0ED1BCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18160\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18683\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-0965\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2436980\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-09-01T12:10:12+00:00",
      "cve": "CVE-2026-0965",
      "id": "CVE-2026-0965",
      "initial_release_date": "2026-02-10T18:47:22.524000+00:00",
      "product_status:fixed": "58",
      "product_status:known_affected": "6",
      "product_status:known_not_affected": "9",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "libssh: libssh: Denial of Service via improper configuration file handling",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0965.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-09-11T01:46:38Z",
      "cve": "CVE-2026-0965",
      "id": "CVE-2026-0965",
      "initial_release_date": "2026-02-12T00:27:51Z",
      "product_status:known_affected": "507",
      "product_status:recommended": "105",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-0965",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-0965.json",
      "version": "38"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-0965\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-30T11:31:36.431851Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-30T11:31:41.875Z\"}}], \"cna\": {\"title\": \"Libssh: libssh: denial of service via improper configuration file handling\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Jakub Jelen (libssh) and Kang Yang for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Low\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_0\": {\"scope\": \"UNCHANGED\", \"version\": \"3.0\", \"baseScore\": 3.3, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.12.0-2.el10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-18.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-18.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"libssh2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"libssh2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"libssh2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift/ose-rhel-coreos-8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift/ose-rhel-coreos-9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-02-04T23:40:45.160Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-02-10T18:47:22.524Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-02-10T18:47:22.524Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:18160\", \"name\": \"RHSA-2026:18160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18683\", \"name\": \"RHSA-2026:18683\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-0965\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2436980\", \"name\": \"RHBZ#2436980\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Ensure the client and server are using only regular files as configuration.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-73\", \"description\": \"External Control of File Name or Path\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-09-01T12:10:14.607Z\"}, \"x_redhatCweChain\": \"CWE-73: External Control of File Name or Path\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-0965\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-01T12:10:14.607Z\", \"dateReserved\": \"2026-01-14T21:54:51.315Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-03-26T20:06:33.336Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

SUSE-SU-2026:1344-1

Vulnerability from csaf_suse - Published: 2026-04-15 10:21 - Updated: 2026-09-16 19:15

Summary

Security update for libssh

Severity

Moderate

Scope

6 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Recommended: 4 products

Open the full advisory

SUSE-SU-2026:1565-1

Vulnerability from csaf_suse - Published: 2026-04-23 07:08 - Updated: 2026-09-16 19:18

Summary

Security update for libssh

Severity

Moderate

Scope

6 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Recommended: 20 products

Open the full advisory

SUSE-SU-2026:20524-1

Vulnerability from csaf_suse - Published: 2026-02-26 11:08 - Updated: 2026-09-16 19:31

Summary

Security update for libssh

Severity

Moderate

Scope

5 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Recommended: 6 products

Open the full advisory

SUSE-SU-2026:20531-1

Vulnerability from csaf_suse - Published: 2026-02-26 11:27 - Updated: 2026-09-16 19:31

Summary

Security update for libssh

Severity

Moderate

Scope

5 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Recommended: 8 products

Open the full advisory

SUSE-SU-2026:21396-1

Vulnerability from csaf_suse - Published: 2026-04-30 09:40 - Updated: 2026-09-16 19:44

Summary

Security update for libssh

Severity

Moderate

Scope

7 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Recommended: 5 products

Open the full advisory

SUSE-SU-2026:21428-1

Vulnerability from csaf_suse - Published: 2026-04-30 09:40 - Updated: 2026-09-16 19:45

Summary

Security update for libssh

Severity

Moderate

Scope

7 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Recommended: 18 products

Open the full advisory

ubuntu-cve-2026-0965

Vulnerability from osv_ubuntu

Published

2026-02-13 00:00

Modified

2026-04-22 07:57

Summary

Details

Severity

3.3 (Low)


                    
                      CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2026-0965	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-0965	REPORT
	https://www.libssh.org/security/advisories/CVE-20…	REPORT
	https://ubuntu.com/security/notices/USN-8051-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8051-2	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libssh-4",
            "binary_version": "0.6.3-4.3ubuntu0.6+esm4"
          },
          {
            "binary_name": "libssh-gcrypt-4",
            "binary_version": "0.6.3-4.3ubuntu0.6+esm4"
          }
        ],
        "priority_reason": "Denial of service that requires malicious configuration"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "libssh",
        "purl": "pkg:deb/ubuntu/libssh@0.6.3-4.3ubuntu0.6+esm4?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.3-4.3ubuntu0.6+esm4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.6.3-3ubuntu3",
        "0.6.3-4.1",
        "0.6.3-4.2",
        "0.6.3-4.2ubuntu1",
        "0.6.3-4.3",
        "0.6.3-4.3ubuntu0.1",
        "0.6.3-4.3ubuntu0.2",
        "0.6.3-4.3ubuntu0.5",
        "0.6.3-4.3ubuntu0.6",
        "0.6.3-4.3ubuntu0.6+esm1",
        "0.6.3-4.3ubuntu0.6+esm2",
        "0.6.3-4.3ubuntu0.6+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libssh-4",
            "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6"
          },
          {
            "binary_name": "libssh-gcrypt-4",
            "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6"
          }
        ],
        "priority_reason": "Denial of service that requires malicious configuration"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "libssh",
        "purl": "pkg:deb/ubuntu/libssh@0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.7.5-1",
        "0.8.0~20170825.94fa1e38-1",
        "0.8.0~20170825.94fa1e38-1build1",
        "0.8.0~20170825.94fa1e38-1ubuntu0.1",
        "0.8.0~20170825.94fa1e38-1ubuntu0.2",
        "0.8.0~20170825.94fa1e38-1ubuntu0.5",
        "0.8.0~20170825.94fa1e38-1ubuntu0.6",
        "0.8.0~20170825.94fa1e38-1ubuntu0.7",
        "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm3",
        "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4",
        "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libssh-4",
            "binary_version": "0.9.3-2ubuntu2.5+esm3"
          },
          {
            "binary_name": "libssh-gcrypt-4",
            "binary_version": "0.9.3-2ubuntu2.5+esm3"
          }
        ],
        "priority_reason": "Denial of service that requires malicious configuration"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "libssh",
        "purl": "pkg:deb/ubuntu/libssh@0.9.3-2ubuntu2.5+esm3?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.9.3-2ubuntu2.5+esm3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.9.0-1ubuntu1",
        "0.9.0-1ubuntu4",
        "0.9.0-1ubuntu5",
        "0.9.3-2ubuntu1",
        "0.9.3-2ubuntu2",
        "0.9.3-2ubuntu2.1",
        "0.9.3-2ubuntu2.2",
        "0.9.3-2ubuntu2.3",
        "0.9.3-2ubuntu2.4",
        "0.9.3-2ubuntu2.5",
        "0.9.3-2ubuntu2.5+esm1",
        "0.9.3-2ubuntu2.5+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libssh-4",
            "binary_version": "0.9.6-2ubuntu0.22.04.6"
          },
          {
            "binary_name": "libssh-gcrypt-4",
            "binary_version": "0.9.6-2ubuntu0.22.04.6"
          }
        ],
        "priority_reason": "Denial of service that requires malicious configuration"
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "libssh",
        "purl": "pkg:deb/ubuntu/libssh@0.9.6-2ubuntu0.22.04.6?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.9.6-2ubuntu0.22.04.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.9.6-1",
        "0.9.6-1build1",
        "0.9.6-2",
        "0.9.6-2build1",
        "0.9.6-2ubuntu0.22.04.1",
        "0.9.6-2ubuntu0.22.04.2",
        "0.9.6-2ubuntu0.22.04.3",
        "0.9.6-2ubuntu0.22.04.4",
        "0.9.6-2ubuntu0.22.04.5"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libssh-4",
            "binary_version": "0.10.6-2ubuntu0.3"
          },
          {
            "binary_name": "libssh-gcrypt-4",
            "binary_version": "0.10.6-2ubuntu0.3"
          }
        ],
        "priority_reason": "Denial of service that requires malicious configuration"
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "libssh",
        "purl": "pkg:deb/ubuntu/libssh@0.10.6-2ubuntu0.3?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.6-2ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.10.5-3ubuntu1",
        "0.10.5-3ubuntu2",
        "0.10.6-2",
        "0.10.6-2build1",
        "0.10.6-2build2",
        "0.10.6-2ubuntu0.1",
        "0.10.6-2ubuntu0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libssh-4",
            "binary_version": "0.11.2-1ubuntu0.2"
          }
        ],
        "priority_reason": "Denial of service that requires malicious configuration"
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "libssh",
        "purl": "pkg:deb/ubuntu/libssh@0.11.2-1ubuntu0.2?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.2-1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.11.1-1",
        "0.11.1-2",
        "0.11.2-1",
        "0.11.2-1build1",
        "0.11.2-1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.",
  "id": "UBUNTU-CVE-2026-0965",
  "modified": "2026-04-22T07:57:42Z",
  "published": "2026-02-13T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-0965"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
    },
    {
      "type": "REPORT",
      "url": "https://www.libssh.org/security/advisories/CVE-2026-0965.txt"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8051-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8051-2"
    }
  ],
  "related": [
    "USN-8051-1",
    "USN-8051-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-0965"
  ]
}

WID-SEC-W-2026-0446

Vulnerability from csaf_certbund - Published: 2026-02-17 23:00 - Updated: 2026-05-31 22:00

Summary

libssh: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS

Severity

Mittel

Scope

5 vulnerabilities in this advisory, including CVE-2026-0965.

CVE-2026-0965

Known affected: 9 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-0965 (GCVE-0-2026-0965)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour