CVE-2023-6918Low· 3.7▾ SunlitA flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situatio…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.4%
A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.
libssh (all versions)libssh (all versions)libssh (all versions)libssh (all versions)libssh2libsshlibssh2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-6004Medium· 4.8Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname
CVE-2026-59846Low· 3.9Libssh: libssh: information disclosure via proxycommand %r username expansion
CVE-2026-59843Medium· 6.5Libssh: libssh: denial of service via zero advertised channel packet size
CVE-2026-59851High· 8.8Libssh: libssh: authentication bypass via missing gssapi principal check
CVE-2026-98783Medium· 4.1kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (CVE-2026-98783)
CVE-2026-77207High· 7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication