Known vulnerabilities in libssh (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libssh_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libssh (Ubuntu package) libssh (Ubuntu package) is affected by 25 known vulnerabilities: 10 medium, 15 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139533 - Use After Free
CVE-2026-59850
CWE-416 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 9 more
#VU139532 - Always-Incorrect Control Flow Implementation
CVE-2026-59849
CWE-670 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260817115
SB20260831114
#VU139531 - Resource exhaustion
CVE-2026-59848
CWE-400 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 4 more
#VU139530 - Improper Validation of Integrity Check Value
CVE-2026-59847
CWE-354 Medium
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 9 more
#VU139529 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-59846
CWE-78 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 3 more
#VU139527 - Improper input validation
CVE-2026-59844
CWE-20 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 8 more
#VU139526 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59843
CWE-835 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 9 more
#VU139525 - Stack-based buffer overflow
CVE-2026-15370
CWE-121 Medium
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260817115
SB20260831114
#VU139524 - Improper Check or Handling of Exceptional Conditions
CVE-2026-59845
CWE-703 Low
No
No
0.9.6-2ubuntu0.22.04.8, 0.10.6-2ubuntu0.5, 0.11.3-1ubuntu2.1 27.07.2026 SB20260727145
SB20260728129
SB20260728153
and 10 more
#VU123156 - Out-of-bounds read
CVE-2026-0968
CWE-125 Medium
No
No
0.6.3-4.3ubuntu0.6+esm4, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6, 0.9.3-2ubuntu2.5+esm3 24.02.2026 SB2026022406
SB2026022408
SB2026022422
and 10 more
#VU123155 - Improper input validation
CVE-2026-0967
CWE-20 Low
No
No
0.6.3-4.3ubuntu0.6+esm4, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6, 0.9.3-2ubuntu2.5+esm3 24.02.2026 SB2026022406
SB2026022408
SB2026022422
and 10 more
#VU123154 - Buffer Underwrite ('Buffer Underflow')
CVE-2026-0966
CWE-124 Low
No
No
0.6.3-4.3ubuntu0.6+esm4, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6, 0.9.3-2ubuntu2.5+esm3 24.02.2026 SB2026022406
SB2026022408
SB2026022422
and 10 more
#VU123153 - Improper input validation
CVE-2026-0965
CWE-20 Low
No
No
0.6.3-4.3ubuntu0.6+esm4, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6, 0.9.3-2ubuntu2.5+esm3 24.02.2026 SB2026022406
SB2026022408
SB2026022422
and 9 more
#VU123151 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0964
CWE-22 Medium
No
No
0.6.3-4.3ubuntu0.6+esm4, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6, 0.9.3-2ubuntu2.5+esm3 24.02.2026 SB2026022406
SB2026022408
SB2026022422
and 10 more
#VU115175 - Missing release of memory after effective lifetime
CVE-2025-8277
CWE-401 Medium
No
No
0.6.3-4.3ubuntu0.6+esm4, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6, 0.9.3-2ubuntu2.5+esm3, 0.9.6-2ubuntu0.22.04.6, 0.10.6-2ubuntu0.3, 0.11.2-1ubuntu0.2 12.09.2025 SB2025091210
SB2025091219
SB2025091220
and 11 more
#VU115174 - Integer overflow
CVE-2025-5449
CWE-190 Medium
No
No
0.9.6-2ubuntu0.22.04.4, 0.10.6-2ubuntu0.1, 0.10.6-3ubuntu1.1, 0.11.1-1ubuntu0.1 12.09.2025 SB2025091209
SB2025091215
SB2025091577
#VU115173 - NULL Pointer Dereference
CVE-2025-8114
CWE-476 Medium
No
No
0.6.3-4.3ubuntu0.6+esm3, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5, 0.9.3-2ubuntu2.5+esm2, 0.9.6-2ubuntu0.22.04.5, 0.10.6-2ubuntu0.2, 0.11.1-1ubuntu0.2, 0.11.2-1ubuntu0.1 12.09.2025 SB2025091208
SB2025091219
SB2025091220
and 12 more
#VU115172 - Return of Wrong Status Code
CVE-2025-5987
CWE-393 Low
No
No
0.9.6-2ubuntu0.22.04.4, 0.10.6-2ubuntu0.1, 0.10.6-3ubuntu1.1, 0.11.1-1ubuntu0.1 12.09.2025 SB2025091207
SB2025091215
SB2025091222
and 17 more
#VU115171 - Double Free
CVE-2025-5351
CWE-415 Low
No
No
0.9.6-2ubuntu0.22.04.4, 0.10.6-2ubuntu0.1, 0.10.6-3ubuntu1.1, 0.11.1-1ubuntu0.1 12.09.2025 SB2025091206
SB2025091215
SB2025091222
and 4 more
#VU114093 - Incorrect Calculation
CVE-2025-5372
CWE-682 Low
No
No
0.9.6-2ubuntu0.22.04.4, 0.10.6-2ubuntu0.1, 0.10.6-3ubuntu1.1, 0.11.1-1ubuntu0.1 14.08.2025 SB2025081494
SB2025081495
SB2025081532
and 21 more


Showing elements 1 - 20 out of 25