The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3330-1 advisory.

    - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
    - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
    - CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
    - CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
    - CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
    - CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
    - CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22956-1 advisory.

    - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
    - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
    - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
    - CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
    - CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
    - CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
    - CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
    - CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
    - CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

    Changes for libssh:

    - Update to 0.11.5:

     * Zero-initialize every ssh_string
     * Fix compatibility with C23 / gcc16
     * Fix multiple memory leaks, null checks, and error checks
     * Validate peer public key in DH key exchange
     * Avoid remote window overflow
     * Avoid off-by-one overflow during kbdint authentication
     * Avoid logging uninitialized sequence numbers
     * Avoid double conversion of SFTP version number
     * Send correct SFTP server version number
     * Avoid handling repeated SFTP INIT messages
     * Harmonize return values from SFTP server callbacks

    - Update %suse_version checks for SLES 16.x (jsc#PED-15815)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55855 advisory.

    libssh is a library which implements the SSH protocol. It can be used to implement client and server     applications.

    Security Fix(es):

    * libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    * libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)

    * libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622180 advisory.

    [0.9.6-17]
    - Backport CVE patches from 0.11.5       Resolves: RHEL-215677       Resolves: RHEL-215674       Resolves: RHEL-215680       Resolves: RHEL-215678       Resolves: RHEL-215675       Resolves: RHEL-215676       Resolves: RHEL-215679

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1751:03 advisory.

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)
      * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)
      * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)
      * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)
      * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)
      * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)
      * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62217 advisory.

    libssh is a library which implements the SSH protocol. It can be used to implement client and server     applications.

    Security Fix(es):

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62218 advisory.

    libssh is a library which implements the SSH protocol. It can be used to implement client and server     applications.

    Security Fix(es):

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787056678 advisory.

  - A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in     the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename     doesn't exist and may lead to possible signing failures or heap corruption. (CVE-2025-4878)

  - A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject     shell metacharacters, exposing environment variables and causing unintended shell behavior.
    (CVE-2026-59846)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
330533	SUSE SLED15 / SLES15 Security Update : libssh (SUSE-SU-2026:3330-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high
330564	SUSE SLES16 Security Update : libssh (SUSE-SU-2026:22956-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high
337346	RHEL 10 : libssh (RHSA-2026:55855)	Nessus	Red Hat Local Security Checks	8/18/2026	8/18/2026	high
342585	Oracle Linux 8 : ELSA-2026-62218-0: / libssh (ELSA-2026-622180)	Nessus	Oracle Linux Local Security Checks	9/3/2026	9/3/2026	high
342593	MiracleLinux 9 : libssh-0.10.4-19.el9_8 (AXSA:2026-1751:03)	Nessus	Miracle Linux Local Security Checks	9/3/2026	9/3/2026	high
342247	RHEL 9 : libssh (RHSA-2026:62217)	Nessus	Red Hat Local Security Checks	9/1/2026	9/1/2026	high
342250	RHEL 8 : libssh (RHSA-2026:62218)	Nessus	Red Hat Local Security Checks	9/1/2026	9/1/2026	high
361407	AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787056678)	Nessus	Alma Linux Local Security Checks	10/1/2026	10/1/2026	low

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

low