CVE-2026-0968
Low · 3.1CVSS
3.1
EPSS
0.4%
Published
Mar 26, 2026
CISA due date
—
The record
A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | libssh | 0 | 0.9.8-150600.11.9.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | libssh | 0 | 0.9.8-3.21.1 |
| openSUSE:Leap 15.6 | libssh | 0 | 0.9.8-150600.11.9.1 |
| openSUSE:Tumbleweed | libssh | 0 | 0.11.4-1.1 |
Related vulnerabilities
- CVE-2026-0967 A flaw was found in libssh. Also affects libssh
- CVE-2026-0966 A flaw was found in libssh. Also affects libssh
- CVE-2026-0964 A malicious SCP server can send unexpected paths that could make the client application… Also affects libssh
- CVE-2026-0965 A flaw was found in libssh where it can attempt to open arbitrary files during… Also affects libssh
- CVE-2026-3731 A weakness has been identified in libssh up to 0.11.3. Also affects libssh
- CVE-2015-3146 The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in… Also affects libssh
- CVE-2014-8132 Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and… Also affects libssh
- CVE-2026-112405 Pillow is a Python imaging library. CWE-476