Skip to content
OpenAdvisories
Medium USN-8093-1 1 CVE

libssh vulnerability

Published Mar 16, 2026 · Updated Oct 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libssh incorrectly performed bounds checking when
processing SFTP extensions. If a client application queried extension data out
of bounds, it could cause the application to crash, resulting in a denial of
service, or exhibit unintended behavior.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libssh 0.9.6-2ubuntu0.22.04.7
Ubuntu · 24.04 LTS 24.04:LTS libssh 0.10.6-2ubuntu0.4
Ubuntu · 25.10 libssh 0.11.2-1ubuntu0.3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libssh 0.6.3-4.3ubuntu0.6+esm5
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS libssh 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS libssh 0.9.3-2ubuntu2.5+esm4

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-3731

    libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

    A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can…

    libssh libssh libssh Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-3731