RHSA-2026:61752
Vulnerability from csaf_redhat - Published: 2026-08-31 17:42 - Updated: 2026-08-31 20:13Summary
Red Hat Security Advisory: libssh2 security update
Severity
Important
Notes
Topic: An update for libssh2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libssh2 packages provide a library that implements the SSH2 protocol.
Security Fix(es):
* libssh2: integer overflow via large username or password arguments (CVE-2026-7598)
* libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation (CVE-2026-58050)
* libssh2: libssh2: Arbitrary code execution via double-free in SFTP session (CVE-2026-66032)
* libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read (CVE-2026-66034)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the `userauth_password` function by manipulating the `username_len` or `password_len` arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library and potentially allows arbitrary code execution.
9.1 (Critical)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution.
7.0 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in libssh2. A malicious SSH (Secure Shell) server can exploit a double-free vulnerability in the sftp_open() function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP (SSH File Transfer Protocol) session. This heap corruption can lead to arbitrary code execution on the client system, giving the attacker control over the affected system.
6.5 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch | — |
Workaround
|
Threats
Impact
Moderate
A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64 | — |
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch | — |
Workaround
|
Threats
Impact
Moderate
References
38 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libssh2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libssh2 packages provide a library that implements the SSH2 protocol.\n\nSecurity Fix(es):\n\n* libssh2: integer overflow via large username or password arguments (CVE-2026-7598)\n\n* libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation (CVE-2026-58050)\n\n* libssh2: libssh2: Arbitrary code execution via double-free in SFTP session (CVE-2026-66032)\n\n* libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read (CVE-2026-66034)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:61752",
"url": "https://access.redhat.com/errata/RHSA-2026:61752"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2464597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464597"
},
{
"category": "external",
"summary": "2493955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493955"
},
{
"category": "external",
"summary": "2506857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506857"
},
{
"category": "external",
"summary": "2506860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506860"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61752.json"
}
],
"title": "Red Hat Security Advisory: libssh2 security update",
"tracking": {
"current_release_date": "2026-08-31T20:13:35+00:00",
"generator": {
"date": "2026-08-31T20:13:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:61752",
"initial_release_date": "2026-08-31T17:42:29+00:00",
"revision_history": [
{
"date": "2026-08-31T17:42:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-31T17:42:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-31T20:13:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.x86_64",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.x86_64",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.i686",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.i686",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc64",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc64",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.s390x",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.s390x",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.s390",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.s390",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"product": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"product_id": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-debuginfo@1.8.0-4.el7_9.2?arch=s390"
}
}
},
{
"category": "product_version",
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"product": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"product_id": "libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-devel@1.8.0-4.el7_9.2?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-0:1.8.0-4.el7_9.2.src",
"product": {
"name": "libssh2-0:1.8.0-4.el7_9.2.src",
"product_id": "libssh2-0:1.8.0-4.el7_9.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2@1.8.0-4.el7_9.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-docs-0:1.8.0-4.el7_9.2.noarch",
"product": {
"name": "libssh2-docs-0:1.8.0-4.el7_9.2.noarch",
"product_id": "libssh2-docs-0:1.8.0-4.el7_9.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libssh2-docs@1.8.0-4.el7_9.2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.i686",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.ppc",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.s390",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64"
},
"product_reference": "libssh2-0:1.8.0-4.el7_9.2.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64"
},
"product_reference": "libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64"
},
"product_reference": "libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-docs-0:1.8.0-4.el7_9.2.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
},
"product_reference": "libssh2-docs-0:1.8.0-4.el7_9.2.noarch",
"relates_to_product_reference": "7Server-optional-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-7598",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-01T22:00:54.329797+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464597"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the `userauth_password` function by manipulating the `username_len` or `password_len` arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library and potentially allows arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: integer overflow via large username or password arguments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to supply an excessively large value to the arguments of the `userauth_password` function, typically to an application processing untrusted SSH authentication requests. The primary security impact of this issue is a crash to the application linked to the library due to memory corruption, potentially allowing arbitrary code execution.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64"
],
"known_not_affected": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7598"
},
{
"category": "external",
"summary": "RHBZ#2464597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464597"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7598"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/",
"url": "https://github.com/libssh2/libssh2/"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1",
"url": "https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/pull/1858",
"url": "https://github.com/libssh2/libssh2/pull/1858"
},
{
"category": "external",
"summary": "https://vuldb.com/submit/805564",
"url": "https://vuldb.com/submit/805564"
},
{
"category": "external",
"summary": "https://vuldb.com/vuln/360555",
"url": "https://vuldb.com/vuln/360555"
},
{
"category": "external",
"summary": "https://vuldb.com/vuln/360555/cti",
"url": "https://vuldb.com/vuln/360555/cti"
}
],
"release_date": "2026-05-01T21:30:11.006000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T17:42:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61752"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications linked to the libssh2 library should be configured or updated to exclusively use public key authentication. Explicitly disabling password-based logins prevents the application from executing the vulnerable userauth_password function.",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libssh2: integer overflow via large username or password arguments"
},
{
"cve": "CVE-2026-58050",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-28T03:01:26.407725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493955"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in libssh2 allows a malicious SSH server to trigger a heap buffer overflow in a connecting client. By manipulating the publickey-subsystem response, an attacker could cause an integer overflow, potentially leading to denial of service or arbitrary code execution on Red Hat systems using libssh2 to establish SSH connections.\n\nNote: Red Hat Enterprise Linux (RHEL) 8 and newer are not affected by this flaw, as they do not ship the libssh2 package.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64"
],
"known_not_affected": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58050"
},
{
"category": "external",
"summary": "RHBZ#2493955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493955"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58050"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58050"
},
{
"category": "external",
"summary": "https://github.com/bikini/exploitarium/tree/main/libssh2-publickey-list-calc-poc",
"url": "https://github.com/bikini/exploitarium/tree/main/libssh2-publickey-list-calc-poc"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/blob/master/src/publickey.c",
"url": "https://github.com/libssh2/libssh2/blob/master/src/publickey.c"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/libssh2-integer-overflow-in-publickey-subsystem-attribute-allocation",
"url": "https://www.vulncheck.com/advisories/libssh2-integer-overflow-in-publickey-subsystem-attribute-allocation"
}
],
"release_date": "2026-06-28T01:32:53.582000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T17:42:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61752"
},
{
"category": "workaround",
"details": "To mitigate this issue,ensure your applications are running strictly on 64-bit architectures, which naturally prevents the integer overflow from occurring. Additionally, configure your applications to connect only to trusted, verified SSH servers.",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation"
},
{
"cve": "CVE-2026-66032",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-07-24T17:03:22.604828+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506857"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libssh2. A malicious SSH (Secure Shell) server can exploit a double-free vulnerability in the sftp_open() function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP (SSH File Transfer Protocol) session. This heap corruption can lead to arbitrary code execution on the client system, giving the attacker control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: libssh2: Arbitrary code execution via double-free in SFTP session",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: A double-free vulnerability in libssh2 allows a malicious SSH server to corrupt the heap of an authenticated client during an SFTP session. This flaw requires user interaction, as a client must connect to a specially crafted server and initiate an SFTP transfer, which can lead to arbitrary code execution on the client system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64"
],
"known_not_affected": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66032"
},
{
"category": "external",
"summary": "RHBZ#2506857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66032"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66032",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66032"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/commit/5e4776146552d898b9c0e1b313cd093fa8dc92d0",
"url": "https://github.com/libssh2/libssh2/commit/5e4776146552d898b9c0e1b313cd093fa8dc92d0"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/pull/2180",
"url": "https://github.com/libssh2/libssh2/pull/2180"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/libssh2-double-free-heap-corruption-via-sftp-open",
"url": "https://www.vulncheck.com/advisories/libssh2-double-free-heap-corruption-via-sftp-open"
}
],
"release_date": "2026-07-24T16:32:39.596000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T17:42:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61752"
},
{
"category": "workaround",
"details": "Restrict your libssh2 clients to connect only to fully trusted, internal SFTP servers to eliminate exposure to malicious server responses. Additionally, configure dependent applications with Restart=on-failure in systemd so RHEL\u0027s glibc memory protections can safely crash and auto-recover the process during an attack.",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libssh2: libssh2: Arbitrary code execution via double-free in SFTP session"
},
{
"cve": "CVE-2026-66034",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-24T17:03:46.498702+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506860"
}
],
"notes": [
{
"category": "description",
"text": "A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in libssh2 allows a malicious SSH server to trigger an out-of-bounds read on a connecting client. While requiring user interaction to connect to a compromised server and having high attack complexity, successful exploitation could leak heap pointers, potentially aiding in ASLR bypass and leading to arbitrary code execution or denial of service on Red Hat Hardened Images.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64"
],
"known_not_affected": [
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66034"
},
{
"category": "external",
"summary": "RHBZ#2506860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506860"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66034"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66034",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66034"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/commit/a13bb6c773f0d55ad1628cede57e99803cd898d9",
"url": "https://github.com/libssh2/libssh2/commit/a13bb6c773f0d55ad1628cede57e99803cd898d9"
},
{
"category": "external",
"summary": "https://github.com/libssh2/libssh2/pull/2202",
"url": "https://github.com/libssh2/libssh2/pull/2202"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/libssh2-heap-out-of-bounds-read-via-publickey-subsystem",
"url": "https://www.vulncheck.com/advisories/libssh2-heap-out-of-bounds-read-via-publickey-subsystem"
}
],
"release_date": "2026-07-24T16:42:18.764000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T17:42:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61752"
},
{
"category": "workaround",
"details": "To mitigate this, strictly avoid connecting to untrusted SSH servers and enforce this policy using outbound network firewalls to block unknown IP addresses. For defense-in-depth, utilize OS-level memory protections and service sandboxing to contain any accidental exposure.",
"product_ids": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.src",
"7Server-ELS:libssh2-0:1.8.0-4.el7_9.2.x86_64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.i686",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.s390x",
"7Server-optional-ELS:libssh2-devel-0:1.8.0-4.el7_9.2.x86_64",
"7Server-optional-ELS:libssh2-docs-0:1.8.0-4.el7_9.2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…