{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libssh is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nSecurity Fix(es):\n\n* libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351)\n\n* libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878)\n\n* libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877)\n\n* libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114)\n\n* libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277)\n\n* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)\n\n* libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)\n\n* libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)\n\n* libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)\n\n* libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:18683",
        "url": "https://access.redhat.com/errata/RHSA-2026:18683"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2369367",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369367"
      },
      {
        "category": "external",
        "summary": "2376184",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376184"
      },
      {
        "category": "external",
        "summary": "2376193",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376193"
      },
      {
        "category": "external",
        "summary": "2383220",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2383220"
      },
      {
        "category": "external",
        "summary": "2383888",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2383888"
      },
      {
        "category": "external",
        "summary": "2433121",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433121"
      },
      {
        "category": "external",
        "summary": "2436979",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436979"
      },
      {
        "category": "external",
        "summary": "2436980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436980"
      },
      {
        "category": "external",
        "summary": "2436981",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436981"
      },
      {
        "category": "external",
        "summary": "2436982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436982"
      },
      {
        "category": "external",
        "summary": "RHEL-150661",
        "url": "https://issues.redhat.com/browse/RHEL-150661"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18683.json"
      }
    ],
    "title": "Red Hat Security Advisory: libssh security update",
    "tracking": {
      "current_release_date": "2026-05-19T15:31:51+00:00",
      "generator": {
        "date": "2026-05-19T15:31:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2026:18683",
      "initial_release_date": "2026-05-19T13:16:29+00:00",
      "revision_history": [
        {
          "date": "2026-05-19T13:16:29+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-19T13:16:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-19T15:31:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.8.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-18.el9.aarch64",
                "product": {
                  "name": "libssh-devel-0:0.10.4-18.el9.aarch64",
                  "product_id": "libssh-devel-0:0.10.4-18.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-18.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-18.el9.aarch64",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-18.el9.aarch64",
                  "product_id": "libssh-debugsource-0:0.10.4-18.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-18.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-18.el9.aarch64",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-18.el9.aarch64",
                  "product_id": "libssh-debuginfo-0:0.10.4-18.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-18.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-18.el9.aarch64",
                "product": {
                  "name": "libssh-0:0.10.4-18.el9.aarch64",
                  "product_id": "libssh-0:0.10.4-18.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-18.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-18.el9.ppc64le",
                "product": {
                  "name": "libssh-devel-0:0.10.4-18.el9.ppc64le",
                  "product_id": "libssh-devel-0:0.10.4-18.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-18.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-18.el9.ppc64le",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-18.el9.ppc64le",
                  "product_id": "libssh-debugsource-0:0.10.4-18.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-18.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
                  "product_id": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-18.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-18.el9.ppc64le",
                "product": {
                  "name": "libssh-0:0.10.4-18.el9.ppc64le",
                  "product_id": "libssh-0:0.10.4-18.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-18.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-18.el9.i686",
                "product": {
                  "name": "libssh-devel-0:0.10.4-18.el9.i686",
                  "product_id": "libssh-devel-0:0.10.4-18.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-18.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-18.el9.i686",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-18.el9.i686",
                  "product_id": "libssh-debugsource-0:0.10.4-18.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-18.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-18.el9.i686",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-18.el9.i686",
                  "product_id": "libssh-debuginfo-0:0.10.4-18.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-18.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-18.el9.i686",
                "product": {
                  "name": "libssh-0:0.10.4-18.el9.i686",
                  "product_id": "libssh-0:0.10.4-18.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-18.el9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-18.el9.x86_64",
                "product": {
                  "name": "libssh-devel-0:0.10.4-18.el9.x86_64",
                  "product_id": "libssh-devel-0:0.10.4-18.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-18.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-18.el9.x86_64",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-18.el9.x86_64",
                  "product_id": "libssh-debugsource-0:0.10.4-18.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-18.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-18.el9.x86_64",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-18.el9.x86_64",
                  "product_id": "libssh-debuginfo-0:0.10.4-18.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-18.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-18.el9.x86_64",
                "product": {
                  "name": "libssh-0:0.10.4-18.el9.x86_64",
                  "product_id": "libssh-0:0.10.4-18.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-18.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-18.el9.s390x",
                "product": {
                  "name": "libssh-devel-0:0.10.4-18.el9.s390x",
                  "product_id": "libssh-devel-0:0.10.4-18.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-18.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-18.el9.s390x",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-18.el9.s390x",
                  "product_id": "libssh-debugsource-0:0.10.4-18.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-18.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-18.el9.s390x",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-18.el9.s390x",
                  "product_id": "libssh-debuginfo-0:0.10.4-18.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-18.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-18.el9.s390x",
                "product": {
                  "name": "libssh-0:0.10.4-18.el9.s390x",
                  "product_id": "libssh-0:0.10.4-18.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-18.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-18.el9.src",
                "product": {
                  "name": "libssh-0:0.10.4-18.el9.src",
                  "product_id": "libssh-0:0.10.4-18.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-18.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0:0.10.4-18.el9.noarch",
                "product": {
                  "name": "libssh-config-0:0.10.4-18.el9.noarch",
                  "product_id": "libssh-config-0:0.10.4-18.el9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-config@0.10.4-18.el9?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.src",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0:0.10.4-18.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch"
        },
        "product_reference": "libssh-config-0:0.10.4-18.el9.noarch",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.src",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0:0.10.4-18.el9.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch"
        },
        "product_reference": "libssh-config-0:0.10.4-18.el9.noarch",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-18.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        },
        "product_reference": "libssh-devel-0:0.10.4-18.el9.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-07-03T18:04:11.051000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376193"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Write beyond bounds in binary to base64 conversion functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security classified this vulnerability as having a Moderate severity. This happens because of the complexity of the attack, the possible misusage of the libssh API and the fact the attacker may not have full control over the positions and contents written into the heap.\n\nNo supported Red Hat products are affected by this issue since only 32-bit builds are vulnerable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376193",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376193"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-4877",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-4877",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11\u0026id=6fd9cc8ce3958092a1aae11f1f2e911b2747732d",
          "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11\u0026id=6fd9cc8ce3958092a1aae11f1f2e911b2747732d"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-4877.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-4877.txt"
        }
      ],
      "release_date": "2025-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Write beyond bounds in binary to base64 conversion functions"
    },
    {
      "cve": "CVE-2025-4878",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-07-03T17:42:21.515000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376184"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Use of uninitialized variable in privatekey_from_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability as having Low severity as the affected privatekey_from_file() function is deprecated and should not be used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376184",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376184"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-4878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-4878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1",
          "url": "https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1"
        },
        {
          "category": "external",
          "summary": "https://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb",
          "url": "https://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-4878.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-4878.txt"
        }
      ],
      "release_date": "2025-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: Use of uninitialized variable in privatekey_from_file()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ronald Crane"
          ]
        }
      ],
      "cve": "CVE-2025-5351",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "discovery_date": "2025-05-30T07:01:54.178000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2369367"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Double Free Vulnerability in libssh Key Export Functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated the severity of this issue as Moderate. The vulnerability arises from a double free condition that is only exploitable under rare and constrained scenarios such as low memory environments. Furthermore, exploitation requires an authenticated user with access to key export functionality, limiting the scope and impact. Despite the restricted preconditions, the flaw still presents a stability concern for services utilizing libssh in sensitive environments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5351"
        },
        {
          "category": "external",
          "summary": "RHBZ#2369367",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369367"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5351",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5351"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5351",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5351"
        }
      ],
      "release_date": "2025-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Administrators should apply vendor-supplied patches as soon as they become available.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Double Free Vulnerability in libssh Key Export Functions"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Philippe Antoine",
            "Jakub Jelen"
          ]
        }
      ],
      "cve": "CVE-2025-8114",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2025-07-24T12:37:24.168000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2383220"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, due to its local attack vector and high complexity of exploitation. Although it requires specific allocation failure scenarios, successful exploitation can result in a crash of SSH clients or servers using libssh. This is caused by a NULL pointer dereference during the calculation of the KEX session ID.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-8114"
        },
        {
          "category": "external",
          "summary": "RHBZ#2383220",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2383220"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-8114",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-8114"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-8114",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8114"
        },
        {
          "category": "external",
          "summary": "https://git.libssh.org/projects/libssh.git/commit/?id=53ac23ded4cb2c5463f6c4cd1525331bd578812d",
          "url": "https://git.libssh.org/projects/libssh.git/commit/?id=53ac23ded4cb2c5463f6c4cd1525331bd578812d"
        },
        {
          "category": "external",
          "summary": "https://git.libssh.org/projects/libssh.git/commit/?id=65f363c9",
          "url": "https://git.libssh.org/projects/libssh.git/commit/?id=65f363c9"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-8114.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-8114.txt"
        }
      ],
      "release_date": "2025-07-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Francesco Rollo"
          ]
        }
      ],
      "cve": "CVE-2025-8277",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "discovery_date": "2025-07-28T11:01:26.808000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2383888"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh\u0027s handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Memory Exhaustion via Repeated Key Exchange in libssh",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Low.The issue requires an authenticated client to repeatedly initiate key exchanges with incorrect guesses, which leads to memory not being properly released. While this flaw can result in gradual memory exhaustion and potential denial of service (DoS) on the client side, it is not easily exploitable in typical usage scenarios and does not affect servers. The vulnerability does not compromise confidentiality or integrity and poses limited impact on system availability under normal operating conditions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-8277"
        },
        {
          "category": "external",
          "summary": "RHBZ#2383888",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2383888"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-8277",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-8277"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-8277",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8277"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-8277.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-8277.txt"
        }
      ],
      "release_date": "2025-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. It is strongly advised to apply updated libssh packages once available to prevent memory exhaustion risks on client systems.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: Memory Exhaustion via Repeated Key Exchange in libssh"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "CTyun"
          ],
          "organization": "Red-Shield Security Lab"
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0964",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-02-04T23:37:53.443000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436979"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A malicious SCP server can send unexpected paths that could make the\nclient application override local files outside of working directory.\nThis could be misused to create malicious executable or configuration\nfiles and make the user execute them under specific consequences.\n\nThis is the same issue as in OpenSSH, tracked as CVE-2019-6111.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Improper sanitation of paths received from SCP servers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0964"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436979",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436979"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0964",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0964"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0964",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0964"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:44:42.346000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "Do not use SCP! SCP is deprecated for several years and will\nbe removed in future releases!\n\nIf you have to, the application MUST validate the path returned\nfrom `ssh_scp_request_get_filename()` is the path the application\nrequested. The libssh does not do any writing in this case.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Improper sanitation of paths received from SCP servers"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kang Yang"
          ]
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0965",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "discovery_date": "2026-02-04T23:40:45.160000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service via improper configuration file handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0965"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0965",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0965",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0965"
        }
      ],
      "release_date": "2026-02-10T18:47:22.524000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "Ensure the client and server are using only regular files as configuration.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: Denial of Service via improper configuration file handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kang Yang",
            "Yunhang Zhang",
            "Jun Xu"
          ]
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0966",
      "cwe": {
        "id": "CWE-124",
        "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
      },
      "discovery_date": "2026-01-26T23:14:46.617000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433121"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server\u0027s logging verbosity is set to `SSH_LOG_PACKET (3)` or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Attack Complexity is high as it requires the logging verbosity to be set to `SSH_LOG_PACKET (3)` or higher, which is not the default configuration in Red Hat Enterprise Linux.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0966"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433121",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433121"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0966",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0966"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0966",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0966"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:47:15.531000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, consider disabling GSSAPI authentication if it is not required, or reduce the `LogLevel` in the `sshd_config` file to a value lower than `SSH_LOG_PACKET` (e.g., `INFO`).\n\nTo disable GSSAPI authentication, add or modify the following line in `/etc/ssh/sshd_config`:\n`GSSAPIAuthentication no`\n\nTo reduce logging verbosity, add or modify the following line in `/etc/ssh/sshd_config`:\n`LogLevel INFO`\n\nAfter making changes to `sshd_config`, the `sshd` service must be restarted for the changes to take effect. This may temporarily interrupt active SSH sessions.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kang Yang"
          ]
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0967",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-02-04T23:43:23.869000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436981"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the `match_pattern()` function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion, resulting in a Denial of Service (DoS) for the client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service via inefficient regular expression processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability in libssh has been rated as Low by Red Hat Product Security.\n\nThis issue arises from inefficient pattern matching logic that may lead to excessive processing time when handling specially crafted patterns. However, these patterns originate from configuration data, meaning an attacker would need the ability to modify or influence configuration files to exploit the issue.\n\nAs a result, exploitation requires local access or equivalent local privileges, and cannot be performed remotely without prior compromise. Additionally, triggering the issue depends on specific conditions during pattern evaluation, increasing the attack complexity.\n\nThe impact of this flaw is limited to potential performance degradation or temporary delays due to increased CPU usage. It does not allow unauthorized access to data, modification of system state, or execution of arbitrary code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0967"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436981",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436981"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0967",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0967"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0967",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0967"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:47:09.215000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        },
        {
          "category": "workaround",
          "details": "Avoid using complex patterns in configuration files and known_hosts.",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: Denial of Service via inefficient regular expression processing"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "nevv"
          ],
          "organization": "CTyun Red-Shield Security Lab"
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0968",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-02-04T23:46:17.534000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed \u0027longname\u0027 field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service due to malformed SFTP message",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability in libssh has been rated as Low by Red Hat Product Security.\n\nThis issue affects the libssh client when processing responses from an SFTP server. Successful exploitation requires a user to initiate a connection to a malicious or compromised SFTP server and perform specific operations, such as listing directory contents. As a result, exploitation is not possible without user interaction.\n\nAdditionally, the vulnerability depends on specially crafted protocol responses from a malicious server, increasing the attack complexity and reducing the likelihood of successful exploitation in typical deployments. \n\nThe impact of this flaw is limited to a client-side denial-of-service condition, such as an application crash. There is no evidence that this issue can be leveraged to execute arbitrary code, access sensitive information, or modify data.\n\nDue to the requirement for user interaction, higher attack complexity, and limited impact on availability only, Red Hat considers this vulnerability to have a lower risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
          "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
          "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0968"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0968",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0968"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0968",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0968"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:46:58.858000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T13:16:29+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18683"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "AppStream-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "AppStream-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.src",
            "BaseOS-9.8.0.GA:libssh-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-config-0:0.10.4-18.el9.noarch",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debuginfo-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-debugsource-0:0.10.4-18.el9.x86_64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.aarch64",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.i686",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.ppc64le",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.s390x",
            "BaseOS-9.8.0.GA:libssh-devel-0:0.10.4-18.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: Denial of Service due to malformed SFTP message"
    }
  ]
}