Skip to content
OpenAdvisories
Low · 2.2 CVE-2026-0967 EUVD-2026-16332GHSA-6jpg-fr24-wpvf

Libssh: libssh: denial of service via inefficient regular expression processing

Published Mar 26, 2026 · Updated Nov 6, 2026 · Assigned by redhat

Vendor: Red Hat Product: Red Hat Enterprise Linux 10 Product: Red Hat Enterprise Linux 6 Product: Red Hat Enterprise Linux 7 Product: Red Hat Enterprise Linux 8 Product: Red Hat Enterprise Linux 9 Product: Red Hat Hardened Images Product: Red Hat OpenShift Container Platform 4 Package: libssh Package: libssh Package: libssh Package: libssh Platform: Linux Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the `match_pattern()` function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion, resulting in a Denial of Service (DoS) for the client.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Hardened Images — —
Red Hat Red Hat OpenShift Container Platform 4 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 libssh 0.12.0-1 —
Debian 13 libssh 0.11.5-0+deb13u1 —
Debian 12 libssh 0.10.6-0+deb12u3 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 25.10 libssh 0.11.2-1ubuntu0.2 USN-8051-1
Ubuntu 24.04 LTS libssh 0.10.6-2ubuntu0.3 USN-8051-1
Ubuntu 22.04 LTS libssh 0.9.6-2ubuntu0.22.04.6 USN-8051-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS libssh 0.9.3-2ubuntu2.5+esm3 —
Ubuntu Pro 18.04 LTS libssh 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6 —
Ubuntu Pro 16.04 LTS libssh 0.6.3-4.3ubuntu0.6+esm4 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 libssh +2 0.12.0-2.el10 RHSA-2026:18160
RHEL 9 libssh +2 0.10.4-18.el9 RHSA-2026:18683

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 libssh +2 0.12.0-2.el10 ALSA-2026:18160
AlmaLinux 9 libssh +2 0.10.4-18.el9 ALSA-2026:18683

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 libssh 0.12.0-2.el10 RLSA-2026:18160
Rocky Linux 9 libssh 0.10.4-18.el9 RLSA-2026:18683

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 libssh 0.9.8-150600.11.9.1 SUSE-SU-2026:0779-1
SLES 12 SP5 libssh 0.6.3-12.28.1 SUSE-SU-2026:1344-1, SUSE-SU-2026:0778-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 6.1 libssh 0.10.6-slfo.1.1_4.1 SUSE-SU-2026:20531-1
SLE Micro 6.0 libssh 0.10.6-4.1 SUSE-SU-2026:20524-1
SLE Micro 5.5 libssh 0.9.8-150400.3.17.1 SUSE-SU-2026:1565-1
SLE Micro 5.4 libssh 0.9.8-150400.3.17.1 SUSE-SU-2026:1565-1
SLE Micro 5.3 libssh 0.9.8-150400.3.17.1 SUSE-SU-2026:1565-1
SLE Micro 5.2 libssh 0.9.8-150200.13.15.1 SUSE-SU-2026:0567-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed libssh 0.11.4-1.1 openSUSE-SU-2026:10203-1
openSUSE Leap 15.6 libssh 0.9.8-150600.11.9.1 SUSE-SU-2026:0779-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 libssh 0.12.0-r0 —
Alpine v3.23 libssh 0.11.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 libssh +2 0.10.6-1.amzn2023.0.5 ALAS2023-2026-1472

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 libssh 0.10.6-7 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 libssh +2 0.12.0-2.el10 ELSA-2026-18160
Oracle Linux 9 libssh +2 0.10.4-18.el9 ELSA-2026-18683

Advisories 19

References