medium6.7
CVE-2026-15370
A flaw was found in libssh.
Impact
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libssh | Libssh | from 0.11.0 before 0.11.5 Version 0.12.0 |
| Redhat | Hardened Images | All versions |
| Redhat | Enterprise Linux | Versions 10.0, 10.2 |
| Redhat | Enterprise Linux For Els | Version 10.2 |
| Redhat | Enterprise Linux For Eus | Version 10.2 |
| Redhat | Enterprise Linux For Ibm Z Systems | Versions 10.0, 10.2 |
| Redhat | Enterprise Linux For Ibm Z Systems Els | Version 10.2 |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | Version 10.2 |
| Redhat | Enterprise Linux For Power Little Endian | Versions 10.0, 10.2 |
| Redhat | Enterprise Linux For Power Little Endian Els | Version 10.2 |
| Redhat | Enterprise Linux For Power Little Endian Eus | Version 10.2 |