CVE catalog

CVE-2026-15370

A flaw was found in libssh. During SFTP server…

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.

Severity: Medium · CVSS 6.7CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Published: Jul 20, 2026, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.17% · Oct 27, 2026

Projects and upstream resources

[libssh][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "libssh",
      "status": "fixed",
      "release": "sid",
      "version": "0.12.2-1"
    },
    {
      "name": "libssh",
      "status": "fixed",
      "release": "forky",
      "version": "0.12.2-1"
    },
    {
      "name": "libssh",
      "status": "fixed",
      "release": "trixie",
      "version": "0.11.5-0+deb13u1"
    },
    {
      "name": "libssh",
      "status": "fixed",
      "release": "trixie-security",
      "version": "0.11.5-0+deb13u1"
    },
    {
      "name": "libssh",
      "status": "not affected",
      "release": "bookworm",
      "version": "0.10.6-0+deb12u2"
    },
    {
      "name": "libssh",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "0.10.6-0+deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1142537,
      "name": "libssh",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "0.12.1-1"
    },
    {
      "bug": 1142537,
      "name": "libssh",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "0.12.1-1"
    },
    {
      "bug": 1142537,
      "name": "libssh",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "0.11.5-0+deb13u1"
    },
    {
      "bug": 1142537,
      "name": "libssh",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "libssh",
      "ecosystem": "cpe",
      "fixed_version": "not yet fixed"
    },
    {
      "name": "libssh",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "hardened_images",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "libssh",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "0.10.6-2ubuntu0.5",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5"
    },
    {
      "name": "libssh-4",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "0.10.6-2ubuntu0.5",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5"
    },
    {
      "name": "libssh-dev",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "0.10.6-2ubuntu0.5",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5"
    },
    {
      "name": "libssh-doc",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "0.10.6-2ubuntu0.5",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5"
    },
    {
      "name": "libssh-gcrypt-4",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "0.10.6-2ubuntu0.5",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5"
    },
    {
      "name": "libssh-gcrypt-dev",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "0.10.6-2ubuntu0.5",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5"
    },
    {
      "name": "enterprise_linux_for_els",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_eus",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_ibm_z_systems",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_ibm_z_systems_els",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_ibm_z_systems_eus",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_power_little_endian",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_power_little_endian_els",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "enterprise_linux_for_power_little_endian_eus",
      "ranges": [],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-15370"
    },
    {
      "name": "libssh",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.9.6-2ubuntu0.22.04.8"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "0.9.6-1",
        "0.9.6-1build1",
        "0.9.6-2",
        "0.9.6-2build1",
        "0.9.6-2ubuntu0.22.04.1",
        "0.9.6-2ubuntu0.22.04.2",
        "0.9.6-2ubuntu0.22.04.3",
        "0.9.6-2ubuntu0.22.04.4",
        "0.9.6-2ubuntu0.22.04.5",
        "0.9.6-2ubuntu0.22.04.6",
        "0.9.6-2ubuntu0.22.04.7"
      ],
      "ecosystem": "deb",
      "fixed_version": "0.9.6-2ubuntu0.22.04.8",
      "provider_record_id": "USN-8699-1"
    },
    {
      "name": "libssh",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.6-2ubuntu0.5"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "0.10.5-3ubuntu1",
        "0.10.5-3ubuntu2",
        "0.10.6-2",
        "0.10.6-2build1",
        "0.10.6-2build2",
        "0.10.6-2ubuntu0.1",
        "0.10.6-2ubuntu0.2",
        "0.10.6-2ubuntu0.3",
        "0.10.6-2ubuntu0.4"
      ],
      "ecosystem": "deb",
      "fixed_version": "0.10.6-2ubuntu0.5",
      "provider_record_id": "USN-8699-1"
    },
    {
      "name": "libssh",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.3-1ubuntu2.1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "0.11.2-1build1",
        "0.11.3-1",
        "0.11.3-1ubuntu1",
        "0.11.3-1ubuntu2"
      ],
      "ecosystem": "deb",
      "fixed_version": "0.11.3-1ubuntu2.1",
      "provider_record_id": "USN-8699-1"
    },
    {
      "name": "libssh",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.3-1ubuntu2.1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "0.11.2-1build1",
        "0.11.3-1",
        "0.11.3-1ubuntu1",
        "0.11.3-1ubuntu2"
      ],
      "ecosystem": "deb",
      "fixed_version": "0.11.3-1ubuntu2.1",
      "provider_record_id": "UBUNTU-CVE-2026-15370"
    },
    {
      "name": "libssh",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:22956-1"
    },
    {
      "name": "libssh",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:22956-1"
    },
    {
      "name": "libssh",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:22948-1"
    },
    {
      "name": "libssh",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:22948-1"
    },
    {
      "name": "libssh",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.2",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:22940-1"
    },
    {
      "name": "libssh",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-1.2"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-1.2",
      "provider_record_id": "OPENSUSE-SU-2026:11377-1"
    },
    {
      "name": "libssh",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.11.5-160000.1.1"
            }
          ]
        }
      ],
      "release": "leap 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "0.11.5-160000.1.1",
      "provider_record_id": "OPENSUSE-SU-2026:21444-1"
    }
  ]
}

[Debian bug #1142537]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libssh-4]Unknown
Source package: [libssh]
Details (4)
- 0.10.6-0+deb12u2 · amd64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u2 · arm64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · amd64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · arm64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
[libssh-dev]Unknown
Source package: [libssh]
Details (4)
- 0.10.6-0+deb12u2 · amd64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u2 · arm64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · amd64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · arm64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
[libssh-doc]Unknown
Source package: [libssh]
Details (4)
- 0.10.6-0+deb12u2 · all · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u2 · all · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · all · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · all · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
[libssh-gcrypt-4]Unknown
Source package: [libssh]
Details (4)
- 0.10.6-0+deb12u2 · amd64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u2 · arm64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · amd64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · arm64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
[libssh-gcrypt-dev]Unknown
Source package: [libssh]
Details (4)
- 0.10.6-0+deb12u2 · amd64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u2 · arm64 · bookworm
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · amd64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm
- 0.10.6-0+deb12u1 · arm64 · bookworm-security
  Not affected
  nvd · libssh · debian · bookworm

[openSUSE Tumbleweed]

[libssh4]Unknown
Source package: [libssh]
Details (1)
- 0.11.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 0.11.5-1.2
  Version impact unknown
  nvd · libssh · opensuse · tumbleweed
[libssh4-32bit]Unknown
Source package: [libssh]
Details (1)
- 0.11.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 0.11.5-1.2
  Version impact unknown
  nvd · libssh · opensuse · tumbleweed
[libssh-config]Unknown
Source package: [libssh]
Details (1)
- 0.11.5-2.1 · noarch · tumbleweed
  Unknown · Fixed: 0.11.5-1.2
  Version impact unknown
  nvd · libssh · opensuse · tumbleweed
[libssh-devel]Unknown
Source package: [libssh]
Details (1)
- 0.11.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 0.11.5-1.2
  Version impact unknown
  nvd · libssh · opensuse · tumbleweed

Observed: Oct 27, 2026, 7:12:47 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]