Maple Labs

CVE search · CVE-2026-15370

CVE-2026-15370

high 7.3

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
secalert@redhat.com
Weakness
CWE-121

Severity

VersionScoreVectorSource
CVSS 3.1 medium 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H secalert@redhat.comSecondary
CVSS 3.1 high 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • libssh · libssh
  • redhat · hardened_images
  • redhat · enterprise_linux
  • redhat · enterprise_linux_for_els
  • redhat · enterprise_linux_for_eus
  • redhat · enterprise_linux_for_ibm_z_systems
  • redhat · enterprise_linux_for_ibm_z_systems_els
  • redhat · enterprise_linux_for_ibm_z_systems_eus
  • redhat · enterprise_linux_for_power_little_endian
  • redhat · enterprise_linux_for_power_little_endian_els
  • redhat · enterprise_linux_for_power_little_endian_eus

References