7.3

CVE-2026-15370

Libssh: libssh: stack buffer overflow in sftp server longname construction

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libssh ≫ Libssh Version >= 0.11.0 < 0.11.5
Libssh ≫ Libssh Version 0.12.0
Redhat ≫ Hardened Images Version -
Redhat ≫ Enterprise Linux Version 10.0
Redhat ≫ Enterprise Linux Version 10.0 HwPlatform arm64
Redhat ≫ Enterprise Linux Version 10.0 HwPlatform x64
Redhat ≫ Enterprise Linux Version 10.2 HwPlatform arm64
Redhat ≫ Enterprise Linux Version 10.2 HwPlatform x64
Redhat ≫ Enterprise Linux For Els Version 10.2 HwPlatform arm64
Redhat ≫ Enterprise Linux For Els Version 10.2 HwPlatform x64
Redhat ≫ Enterprise Linux For Eus Version 10.2 HwPlatform arm64
Redhat ≫ Enterprise Linux For Eus Version 10.2 HwPlatform x64
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.056
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
RedHat 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://access.redhat.com/security/cve/CVE-2026-15370
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2499049
Vendor Advisory
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:47768
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:55855
Vendor Advisory