Skip to content
OpenAdvisories

Package · Debian

libssh2

25 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2026-55200 Public exploit

    libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

    libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length value…

    libssh2 libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2023-48795 Public exploit EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    openssh lxd erlang openssh Debian Ubuntu Alpine PyPI Go crates.io
  • Unscored —
    CVE-2019-17498 Public exploit

    In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds ch…

    libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-13115 Public exploit EPSS 12%

    In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow …

    libssh2 libssh2 libssh2 Debian Ubuntu Alpine