A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh | Jul 29, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade libssh | Aug 3, 2026 | Aug 3, 2026 |
| Redhat_linux | — | Upgrade libssh-debugsourceUpgrade libssh-debuginfoUpgrade libssh-configUpgrade libsshUpgrade libssh-devel | Aug 19, 2026 | Jul 21, 2026 |
| Rocky_linux | — | Upgrade libsshUpgrade libssh-debugsourceUpgrade libssh-develUpgrade libssh-debuginfo | Aug 20, 2026 | Aug 18, 2026 |
| Ubuntu | — | Upgrade libssh-4 | Aug 31, 2026 | Aug 31, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub