CVE-2026-15370

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-15370
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15370.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-15370
Downstream
BELL (1)
CGA (6)
DEBIAN (1)
ECHO (1)
MGASA (1)
MINI (1)
openSUSE (2)
RHSA (2)
RLSA (1)
SUSE (3)
UBUNTU (1)
Related
ALSA (1)
openSUSE (2)
SUSE (3)
Published
2026-07-21T09:07:34Z
Modified
2026-09-24T03:45:14Z
Severity
  • 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Libssh: libssh: stack buffer overflow in sftp server longname construction
Details

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-121"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15370.json"
}
References

Affected packages

Git / gitlab.com/libssh/libssh-mirror

Affected ranges

Type
GIT
Repo
https://gitlab.com/libssh/libssh-mirror
Events
Introduced
894e07aede659d26e13569ac9987191b81bc359d
Fixed
a09fdd00416e53b6ed436df6ff14339a4f884601
Introduced
50313883f3a077458cde4ea95bf46bfeb0771b34
Last Affected
50313883f3a077458cde4ea95bf46bfeb0771b34
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:libssh:libssh:0.12.0:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0.11.0"
        },
        {
            "fixed":  "0.11.5"
        },
        {
            "introduced":  "0.12.0"
        },
        {
            "last_affected":  "0.12.0"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

0.*
0.12.0
libssh-0.*
libssh-0.11.0
libssh-0.11.1
libssh-0.11.2
libssh-0.11.3
libssh-0.11.4
libssh-0.12.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15370.json"