CVE-2026-7598

<= 1.11.1

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the

7.3HIGH

CVE-2023-48795

< 1.11.1

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacker

5.9MEDIUM

CVE-2020-22218

all versions

An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

7.5HIGH

CVE-2019-17498

<= 1.9.0

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabli

8.1HIGH

CVE-2019-13115

< 1.9.0

In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could

8.1HIGH

CVE-2019-3861

>= 0.15 and <= 1.8.0

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than

5.0MEDIUM

CVE-2019-3860

>= 0.3 and <= 1.8.0

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote

5.0MEDIUM

CVE-2019-3857

>= 1.2.8 and <= 1.8.0

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHAN

8.8HIGH

CVE-2019-3856

< 1.8.1

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard p

8.8HIGH

CVE-2019-3863

< 1.8.1

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard

7.5HIGH

CVE-2019-3858

< 1.8.1

An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server

5.0MEDIUM

CVE-2019-3855

< 1.8.1

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are

8.8HIGH

CVE-2019-3862

< 1.8.1

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status m

7.3HIGH

CVE-2019-3859

< 1.8.1

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev func

9.1CRITICAL

CVE-2016-0787

<= 1.6.0

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes i

5.9MEDIUM

CVE-2015-1782

<= 1.4.3

The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other un