Vendor
Libssh
45 known vulnerabilities in products by Libssh, 0 of them actively exploited (CISA KEV).
Key figures
45
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-10933 | Libssh: DEPRECATED: Authentication Bypass Issues | 9.1 | |
| Medium | CVE-2023-48795 | SSH Communications Security SSH daemon: security vulnerability | 5.9 | |
| Medium | CVE-2025-5318 | Libssh: out-of-bounds read in sftp_handle() | 5.4 | |
| High | CVE-2015-3146 | Libssh: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2021-3634 | Libssh: Out-of-bounds Write | 6.5 | |
| High | CVE-2025-5987 | Libssh: invalid return code for chacha20 poly1305 with openssl backend | 8.1 | |
| High | CVE-2019-14889 | Red Hat Libssh: OS Command Injection | 7.1 | |
| Medium | CVE-2020-16135 | Libssh: NULL Pointer Dereference | 5.9 | |
| Medium | CVE-2020-1730 | Red Hat Libssh: NULL Pointer Dereference | 5.3 | |
| Medium | CVE-2016-0739 | Libssh: security vulnerability | 5.9 | |
| High | CVE-2026-3731 | libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds | 5.3 | |
| High | CVE-2026-59851 | Libssh: libssh: authentication bypass via missing gssapi principal check | 8.8 | |
| Medium | CVE-2026-59843 | Libssh: libssh: denial of service via zero advertised channel packet size | 6.5 | |
| Medium | CVE-2023-1667 | Libssh: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2025-5449 | Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service | 6.5 | |
| Not rated | CVE-2012-4562 | Libssh: Buffer Overflow | — | |
| Medium | CVE-2026-59844 | Libssh: libssh: denial of service via oversized sftp read length | 6.5 | |
| Not rated | CVE-2012-4560 | Libssh: Buffer Overflow | — | |
| Medium | CVE-2023-2283 | Libssh: Improper Authentication | 6.5 | |
| Not rated | CVE-2012-4559 | Libssh: Double Free | — | |
| Not rated | CVE-2014-8132 | Libssh: Double Free | — | |
| Not rated | CVE-2012-4561 | Libssh: Denial of Service | — | |
| High | CVE-2026-0966 | Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() | 6.5 | |
| Medium | CVE-2023-6918 | Libssh: missing checks for return values for digests | 3.7 | |
| Not rated | CVE-2012-6063 | Libssh: Double Free | — |
Products
| Libssh | 45 | 0 |