A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh | Jul 29, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade libssh | Aug 3, 2026 | Aug 3, 2026 |
| Redhat_linux | — | Upgrade libssh-develUpgrade libsshUpgrade libssh-configUpgrade libssh-debuginfoUpgrade libssh-debugsource | Jul 23, 2026 | Jul 21, 2026 |
| Rocky_linux | — | Upgrade libssh-debugsourceUpgrade libsshUpgrade libssh-debuginfoUpgrade libssh-devel | Aug 20, 2026 | Aug 18, 2026 |
| Ubuntu | — | Upgrade libssh-4 | Aug 31, 2026 | Aug 31, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub