AZL-108519

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108519.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-108519
Upstream
Published
2026-06-17T20:17:28Z
Modified
2026-11-05T05:40:51Z
Summary
CVE-2026-55200 affecting package rust 1.98.1-1
Details

libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

References

Affected packages

Azure Linux:3 / rust

Package

Name
rust
Purl
pkg:rpm/azure-linux/rust

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.85.0
Last Affected
1.98.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108519.json"