PT-2026-20979 · Libssh+3 · Libssh+3

Published 2026-01-01 · Updated 2026-05-19 · CVE-2026-0968

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.11.4-1.1

Description A denial of service condition can occur due to a malformed SFTP message.

Recommendations Update to version 0.11.4-1.1 or later.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2026:18160

ALSA-2026:18683

BDU:2026-05143

CVE-2026-0968

ECHO-FC76-5C23-C989

OESA-2026-1558

OESA-2026-1559

OESA-2026-1560

OESA-2026-1561

OESA-2026-1562

OESA-2026-1563

OPENSUSE-SU-2026:10203-1

SUSE-SU-2026:0567-1

SUSE-SU-2026:0778-1

SUSE-SU-2026:0779-1

SUSE-SU-2026:1344-1

SUSE-SU-2026:1565-1

SUSE-SU-2026:20524-1

SUSE-SU-2026:20531-1

USN-8051-1

USN-8051-2

Affected Products

Linuxmint

Red Os

Ubuntu

Libssh

References · 99

• https://osv.dev/vulnerability/openSUSE-SU-2026:10203-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-0968 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1344-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:18160 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1558 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1562 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8051-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:18683 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-0968 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:18160 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0567-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0967 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20531-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0779-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory