PT-2026-20975 · Libssh+4 · Libssh+4

Bzimport

·

CVE-2026-0964

·

Published

2026-01-01

·

Updated

2026-09-01

CVSS v3.1

6.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions libssh (affected versions not specified)
Description The software contains an issue related to improper sanitation of paths received from SCP servers. This could potentially lead to security consequences.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

ALSA-2026:18160
ALSA-2026:18683
AZL-81098
BDU:2026-05141
CVE-2026-0964
ECHO-E22E-7DC5-9540
JLSEC-2026-779
MGASA-2026-0202
OESA-2026-1492
OESA-2026-1558
OESA-2026-1559
OESA-2026-1560
OESA-2026-1561
OESA-2026-1562
OPENSUSE-SU-2026:10203-1
OPENSUSE-SU-2026:20647-1
RHSA-2026:18160
RHSA-2026:18683
SUSE-SU-2026:0567-1
SUSE-SU-2026:0778-1
SUSE-SU-2026:0779-1
SUSE-SU-2026:1344-1
SUSE-SU-2026:1565-1
SUSE-SU-2026:20524-1
SUSE-SU-2026:20531-1
SUSE-SU-2026:21396-1
SUSE-SU-2026:21428-1
USN-8051-1
USN-8051-2

Affected Products

Linuxmint
Red Os
Rocky Linux
Ubuntu
Libssh