Red Hat Enterprise Linux 7/libssh2

Red Hat · Package

15 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review.	russh golang.org/x/crypto	Rust / CargoGoPyPIRed Hat	Medium	Fix reported	2026-09-10
libssh2: Out-of-bounds reads with specially crafted SFTP packetsCVE-2019-3860	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds readCVE-2019-3859	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds writeCVE-2019-13115	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh: authorization bypass in pki_verify_data_signatureCVE-2023-2283	CloudForms Management Engine 5/libssh2 Red Hat Enterprise Linux 6/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh: Missing checks for return values for digestsCVE-2023-6918	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Low	No fix reported	Not recorded
libssh: Invalid return code for chacha20 poly1305 with OpenSSL backendCVE-2025-5987	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh: Use of uninitialized variable in privatekey_from_file()CVE-2025-4878	Red Hat Enterprise Linux 10/libssh Red Hat Enterprise Linux 6/libssh2	Red Hat	Low	No fix reported	Not recorded
libssh: Incorrect Return Code Handling in ssh_kdf() in libsshCVE-2025-5372	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh: Double Free Vulnerability in libssh Key Export FunctionsCVE-2025-5351	Red Hat Enterprise Linux 10/libssh Red Hat Enterprise Linux 6/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh: Memory Exhaustion via Repeated Key Exchange in libsshCVE-2025-8277	Red Hat Enterprise Linux 10/libssh Red Hat Enterprise Linux 6/libssh2	Red Hat	Low	No fix reported	Not recorded
libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handlerCVE-2026-3731	Red Hat Enterprise Linux 10/libssh Red Hat Enterprise Linux 6/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO messageCVE-2026-55199	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh2: libssh2: Information disclosure and denial of service via crafted SFTP responseCVE-2025-15661	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded
libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey responseCVE-2026-58051	Red Hat Enterprise Linux 6/libssh2 Red Hat Enterprise Linux 7/libssh2	Red Hat	Medium	No fix reported	Not recorded