Advisoriesby IbisRed HatCVE-2026-59844
Red Hat libssh: resource exhaustion
No fix yet
A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-789
- www.cve.org/CVERecord?id=CVE-2026-59844
- nvd.nist.gov/vuln/detail/CVE-2026-59844
- access.redhat.com/errata/RHSA-2026:42922
- access.redhat.com/errata/RHSA-2026:55855
- access.redhat.com/errata/RHSA-2026:62217
- access.redhat.com/errata/RHSA-2026:62218
- access.redhat.com/security/cve/CVE-2026-59844
- bugzilla.redhat.com/show_bug.cgi?id=2498177