https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:24:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08974 bdu:2026-08974 https://cve.radiocsirt.org/vuln/bdu:2026-08974 https://cve.radiocsirt.org/vuln/bell-cve-2026-58051 <p><strong>Affected:</strong> Alpaquita:23: libssh2, Alpaquita:25: libssh2, Alpaquita:stream: libssh2</p> <p><strong>Affected:</strong> Alpaquita:23: libssh2, Alpaquita:25: libssh2, Alpaquita:stream: libssh2</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-58051 https://cve.radiocsirt.org/vuln/brew-libssh2-cve-2026-58051 <p><strong>Affected:</strong> Homebrew: libssh2</p> <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> <p><strong>Affected:</strong> Homebrew: libssh2</p> <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> https://cve.radiocsirt.org/vuln/brew-libssh2-cve-2026-58051 https://cve.radiocsirt.org/vuln/euvd-2026-330972 EUVD-2026-330972 https://cve.radiocsirt.org/vuln/euvd-2026-330972 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58051 <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58051 https://cve.radiocsirt.org/vuln/ghsa-c5f3-hwj2-xp5p <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> https://cve.radiocsirt.org/vuln/ghsa-c5f3-hwj2-xp5p https://cve.radiocsirt.org/vuln/msrc_cve-2026-58051 msrc_CVE-2026-58051 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58051 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11454-1 <p>libssh2-1-1.11.1-4.1 on GA media</p> <p>libssh2-1-1.11.1-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11454-1 https://cve.radiocsirt.org/vuln/rhsa-2026:46535 <p>libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response</p> <p>libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response</p> https://cve.radiocsirt.org/vuln/rhsa-2026:46535 https://cve.radiocsirt.org/vuln/suse-su-2026:23049-1 <p>Security update for libssh2_org</p> <p>Security update for libssh2_org</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23049-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58051 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libssh2, Ubuntu:Pro:16.04:LTS: libssh2, Ubuntu:Pro:18.04:LTS: libssh2, Ubuntu:Pro:20.04:LTS: libssh2, Ubuntu:22.04:LTS: libssh2, Ubuntu:24.04:LTS: libssh2, Ubuntu:25.10: libssh2, Ubuntu:26.04:LTS: libssh2</p> <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libssh2, Ubuntu:Pro:16.04:LTS: libssh2, Ubuntu:Pro:18.04:LTS: libssh2, Ubuntu:Pro:20.04:LTS: libssh2, Ubuntu:22.04:LTS: libssh2, Ubuntu:24.04:LTS: libssh2, Ubuntu:25.10: libssh2, Ubuntu:26.04:LTS: libssh2</p> <p>libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free operating on an uninitialized entry. A malicious SSH server offering the publickey subsystem can use a malformed response to make cleanup free an uninitialized, attacker-influenceable attrs pointer in a connecting libssh2 client.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58051 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2099 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libssh2 ausnutzen, um Dateien zu manipulieren, Speicherbeschädigungen zu verursachen, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Auswirkungen zu erzielen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libssh2 ausnutzen, um Dateien zu manipulieren, Speicherbeschädigungen zu verursachen, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Auswirkungen zu erzielen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2099