CVE-2026-7598: falha de média gravidade em libssh2
libssh2 userauth.c userauth_password integer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
n/a · libssh2Referências
https://access.redhat.com/errata/RHSA-2026:16736https://access.redhat.com/errata/RHSA-2026:61752https://access.redhat.com/errata/RHSA-2026:7021https://access.redhat.com/security/cve/CVE-2026-7598https://bugzilla.redhat.com/show_bug.cgi?id=2464597https://github.com/libssh2/libssh2/https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1https://github.com/libssh2/libssh2/pull/1858https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7598.jsonhttps://vuldb.com/submit/805564https://vuldb.com/vuln/360555https://vuldb.com/vuln/360555/cti