AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-59843

Red Hat libssh: denial of service

Red Hat

CVE-2026-59843 · Published Jul 21, 2026 · updated Sep 1, 2026

Medium6.5
No fix yet
Red Hat advisory

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-835, CWE-400

More Red Hat advisories

All Red Hat
Low 2.9Jul 21Red Hat libarchive: integer overflowCVE-2026-16517no fix yetLow 3.4Jul 21Red Hat Enterprise Linux 10: information disclosureCVE-2026-12547no fix yetMedium 4.2Jul 21Red Hat Enterprise Linux 10: out-of-bounds readCVE-2026-12548no fix yetHigh 7.8Jul 21Red Hat ansible-core: argument injectionCVE-2026-16493no fix yetLow 3.1Jul 21Red Hat libssh. Logic errors: denial of serviceCVE-2026-59849no fix yetMedium 4.3Jul 21Red Hat libssh: use after freeCVE-2026-59850no fix yet