CVE catalog

CVE-2016-0787

libssh2: CVE-2016-0787

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.59% · Oct 27, 2026

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibssh2sid1.11.1-6fixed
Debianlibssh2forky1.11.1-6fixed
Debianlibssh2trixie1.11.1-1+deb13u2fixed
Debianlibssh2trixie-security1.11.1-1+deb13u1fixed
Debianlibssh2bookworm1.10.0-3fixed
Debianlibssh2bookworm-security1.10.0-3+deb12u1fixed
Alpinelibssh23.41.7.0-r0fixed
Ubuntulibssh214.041.4.3-1vulnerable
Ubuntulibssh214.041.4.3-2vulnerable
Ubuntulibssh214.041.4.3-2ubuntu0.1fixed
Ubuntulibssh216.041.5.0-2vulnerable
Ubuntulibssh216.041.5.0-2ubuntu0.1fixed
Suselibssh2_orglinux enterprise software development kit 11 sp41.2.9-4.2.6.1fixed
Suselibssh2_orglinux enterprise desktop 11 sp41.2.9-4.2.6.1fixed
Suselibssh2_orglinux enterprise server 11 sp41.2.9-4.2.6.1fixed
Suselibssh2_orglinux enterprise server for sap applications 11 sp41.2.9-4.2.6.1fixed
Suselibssh2_orglinux enterprise desktop 121.4.3-16.1fixed
Suselibssh2_orglinux enterprise desktop 12 sp11.4.3-16.1fixed
Suselibssh2_orglinux enterprise software development kit 121.4.3-16.1fixed
Suselibssh2_orglinux enterprise software development kit 12 sp11.4.3-16.1fixed
Suselibssh2_orglinux enterprise server 121.4.3-16.1fixed
Suselibssh2_orglinux enterprise server for sap applications 121.4.3-16.1fixed
Suselibssh2_orglinux enterprise server 12 sp11.4.3-16.1fixed
Suselibssh2_orglinux enterprise server for sap applications 12 sp11.4.3-16.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibssh2sourcesid1.5.0-2.1not yet assignedNot reported[815662]
Debianlibssh2sourceforky1.5.0-2.1not yet assignedNot reported[815662]
Debianlibssh2sourcetrixie1.5.0-2.1not yet assignedNot reported[815662]
Debianlibssh2sourcebookworm1.5.0-2.1not yet assignedNot reported[815662]
Alpinelibssh2apk3.41.7.0-r0Not reportedALPINE-CVE-2016-0787Not reported
Ubuntulibssh2deb14.041.4.3-2ubuntu0.1Not reportedUBUNTU-CVE-2016-0787Not reported
Ubuntulibssh2deb16.041.5.0-2ubuntu0.1Not reportedUBUNTU-CVE-2016-0787Not reported
Suselibssh2_orgrpmlinux enterprise software development kit 11 sp41.2.9-4.2.6.1Not reportedSUSE-SU-2016:0723-1Not reported
Suselibssh2_orgrpmlinux enterprise desktop 11 sp41.2.9-4.2.6.1Not reportedSUSE-SU-2016:0723-1Not reported
Suselibssh2_orgrpmlinux enterprise server 11 sp41.2.9-4.2.6.1Not reportedSUSE-SU-2016:0723-1Not reported
Suselibssh2_orgrpmlinux enterprise server for sap applications 11 sp41.2.9-4.2.6.1Not reportedSUSE-SU-2016:0723-1Not reported
Suselibssh2_orgrpmlinux enterprise desktop 121.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise desktop 12 sp11.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise software development kit 121.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise software development kit 12 sp11.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise server 121.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise server for sap applications 121.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise server 12 sp11.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported
Suselibssh2_orgrpmlinux enterprise server for sap applications 12 sp11.4.3-16.1Not reportedSUSE-SU-2016:0718-1Not reported

[Debian bug #815662]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libssh2-1]Unknown

    Source package: [libssh2]

    Details (2)

    • 1.10.0-3+b1 · amd64 · bookworm

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · bookworm; dsa · libssh2 · debian · 12

    • 1.10.0-3+b1 · arm64 · bookworm

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · bookworm; dsa · libssh2 · debian · 12

  • [libssh2-1-dev]Unknown

    Source package: [libssh2]

    Details (2)

    • 1.10.0-3+b1 · amd64 · bookworm

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · bookworm; dsa · libssh2 · debian · 12

    • 1.10.0-3+b1 · arm64 · bookworm

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · bookworm; dsa · libssh2 · debian · 12

[Debian 13 (Trixie)]

  • [libssh2-1-dev]Unknown

    Source package: [libssh2]

    Details (4)

    • 1.11.1-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

    • 1.11.1-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

    • 1.11.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

    • 1.11.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

  • [libssh2-1t64]Unknown

    Source package: [libssh2]

    Details (4)

    • 1.11.1-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

    • 1.11.1-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

    • 1.11.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

    • 1.11.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.5.0-2.1

      dsa · libssh2 · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]