PT-2026-20977 · Unknown+3 · Libssh-Config+3

Osidb Bzimport · Published 2026-01-01 · Updated 2026-05-19 · CVE-2026-0966

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions libssh-config versions prior to 0.11.4-1.1

Description A buffer underflow issue exists in the ssh get hexa() function when processing invalid input. This can potentially lead to unexpected behavior or compromise the system.

Recommendations Update to libssh-config version 0.11.4-1.1 or later.

Fix

DoS

Weakness Enumeration

CWE-124

Related Identifiers

ALSA-2026:18160

ALSA-2026:18683

BDU:2026-05142

CVE-2026-0966

ECHO-C25D-53F4-8782

OESA-2026-1558

OESA-2026-1559

OESA-2026-1560

OESA-2026-1561

OESA-2026-1562

OESA-2026-1563

OPENSUSE-SU-2026:10203-1

RHSA-2026:7067

SUSE-SU-2026:0567-1

SUSE-SU-2026:0778-1

SUSE-SU-2026:0779-1

SUSE-SU-2026:1344-1

SUSE-SU-2026:1565-1

SUSE-SU-2026:20524-1

SUSE-SU-2026:20531-1

USN-8051-1

USN-8051-2

Affected Products

Linuxmint

Red Os

Ubuntu

Libssh-Config

References · 102

• https://osv.dev/vulnerability/openSUSE-SU-2026:10203-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-0966 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-0966 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1344-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:18160 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1558 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1562 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8051-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:18683 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:18160 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-0968 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0567-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0967 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20531-1 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-0966 · Vendor Advisory