Skip to content
OpenAdvisories

Package · Wolfi

libssh2

14 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-55200 Public exploit

    libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

    libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length value…

  • Medium 5.9
    CVE-2023-48795 Public exploit Scanner template EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…