CVE-2026-15370
ADVISORY - nistSummary
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
EPSS Score: 0.00157 (0.054)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Stack-based Buffer Overflow
ADVISORY - redhat
Stack-based Buffer Overflow
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-15370
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| debian/libssh | deb | debian | 12 | >0 | Not yet available |
| debian/libssh | deb | debian | 14 | <0.12.1-1 | 0.12.1-1 |
| debian/libssh | deb | debian | 13 | <0.11.5-0+deb13u1 | 0.11.5-0+deb13u1 |
| debian/libssh | deb | debian | 11 | >0 | Not yet available |
| debian/libssh | deb | debian | unstable | <0.12.1-1 | 0.12.1-1 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-15370
EXPLOITABILITY SCORE
0.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
6.7mediumAlpine
CREATED
UPDATED
ADVISORY IDCVE-2026-15370
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-15370
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-15370
EXPLOITABILITY SCORE
0.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)