NexaPulse
Subscribe
8.2highHigh

CVE-2026-0966

Libssh Libssh

A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server's logging verbosity is set to `SSH_LOG_PACKET (3)` or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon process.

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
8.2 (v3.1)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-124
Assigned by
secalert@redhat.com

Dates

Published
2026-03-26
Last modified
2026-09-01
Sources
NVD

Affected products

  • Libssh Libssh- 0.11.4
  • Redhat Hardened Imagesall versions
  • Redhat Openshift Container Platform4.0
  • Redhat Enterprise Linux8.0, 9.0, 10.0

As listed in the NVD configuration data. Not a statement about your estate.

References