Product by Debian
Libssh
33 known vulnerabilities in Libssh (Debian), 0 of them actively exploited (CISA KEV).
Key figures
33
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-10933 | Libssh: DEPRECATED: Authentication Bypass Issues | 9.1 | |
| Medium | CVE-2023-48795 | SSH Communications Security SSH daemon: security vulnerability | 5.9 | |
| Medium | CVE-2025-5318 | Libssh: out-of-bounds read in sftp_handle() | 5.4 | |
| High | CVE-2015-3146 | Libssh: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2021-3634 | Libssh: Out-of-bounds Write | 6.5 | |
| High | CVE-2019-14889 | Red Hat Libssh: OS Command Injection | 7.1 | |
| Medium | CVE-2020-16135 | Libssh: NULL Pointer Dereference | 5.9 | |
| Medium | CVE-2016-0739 | Libssh: security vulnerability | 5.9 | |
| High | CVE-2026-3731 | libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds | 5.3 | |
| Medium | CVE-2026-59843 | Libssh: libssh: denial of service via zero advertised channel packet size | 6.5 | |
| Medium | CVE-2023-1667 | Libssh: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2026-59844 | Libssh: libssh: denial of service via oversized sftp read length | 6.5 | |
| Medium | CVE-2023-2283 | Libssh: Improper Authentication | 6.5 | |
| Not rated | CVE-2014-8132 | Libssh: Double Free | — | |
| High | CVE-2026-0966 | Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() | 6.5 | |
| Medium | CVE-2023-6918 | Libssh: missing checks for return values for digests | 3.7 | |
| Low | CVE-2025-8277 | Libssh: memory exhaustion via repeated key exchange in libssh | 3.1 | |
| High | CVE-2026-59847 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification | 5.9 | |
| High | CVE-2026-15370 | Libssh: libssh: stack buffer overflow in sftp server longname construction | 6.7 | |
| Medium | CVE-2026-59848 | Libssh: libssh: denial of service via sftp responses with unknown request ids | 5.3 | |
| Medium | CVE-2026-0964 | Libssh: improper sanitation of paths received from scp servers | 5.0 | |
| High | CVE-2025-5372 | Libssh: incorrect return code handling in ssh_kdf() in libssh | 5.0 | |
| High | CVE-2026-59850 | Libssh: libssh: use-after-free via data callbacks on closed channels | 4.3 | |
| High | CVE-2026-59849 | Libssh: libssh: denial of service via automatic certificate authentication loop | 3.1 | |
| Medium | CVE-2026-59845 | Libssh: libssh: denial of service via unchecked proxycommand fork() failure | 5.3 |