low3.1
CVE-2026-59849
A flaw was found in libssh.
Impact
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libssh | Libssh | from 0.11.0 before 0.11.5 Version 0.12.0 |
| Redhat | Hardened Images | All versions |
| Redhat | Enterprise Linux | Versions 10.0, 10.2 |
| Redhat | Enterprise Linux For Els | Version 10.2 |
| Redhat | Enterprise Linux For Eus | Version 10.2 |
| Redhat | Enterprise Linux For Ibm Z Systems | Versions 10.0, 10.2 |
| Redhat | Enterprise Linux For Ibm Z Systems Els | Version 10.2 |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | Version 10.2 |
| Redhat | Enterprise Linux For Power Little Endian | Versions 10.0, 10.2 |
| Redhat | Enterprise Linux For Power Little Endian Els | Version 10.2 |
| Redhat | Enterprise Linux For Power Little Endian Eus | Version 10.2 |