Product by Libssh2
libssh2
25 known vulnerabilities in libssh2 (Libssh2), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-55200 | libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c | 8.3 | |
| High | CVE-2019-13115 | libssh2: Out-of-Bounds Read | 8.1 | |
| Medium | CVE-2023-48795 | SSH Communications Security SSH daemon: security vulnerability | 5.9 | |
| High | CVE-2019-3855 | The libssh2 Project Libssh2: Integer Overflow or Wraparound | 7.5 | |
| Critical | CVE-2019-3862 | The libssh2 Project Libssh2: Improper Handling of Length Parameter Inconsistency | 7.3 | |
| High | CVE-2019-3856 | The libssh2 Project Libssh2: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2019-3857 | The libssh2 Project Libssh2: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2019-17498 | libssh2: Out-of-Bounds Access | 8.1 | |
| High | CVE-2019-3863 | The libssh2 Project Libssh2: Integer Overflow or Wraparound | 7.5 | |
| Critical | CVE-2019-3858 | The libssh2 Project Libssh2: Out-of-bounds Read | 5.0 | |
| Critical | CVE-2019-3859 | The libssh2 Project Libssh2: Out-of-bounds Read | 5.0 | |
| Critical | CVE-2019-3860 | The libssh2 Project Libssh2: Out-of-bounds Read | 5.0 | |
| Critical | CVE-2019-3861 | The libssh2 Project Libssh2: Out-of-bounds Read | 5.0 | |
| High | CVE-2025-15661 | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c | 6.5 | |
| High | CVE-2026-55199 | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler | 5.9 | |
| Medium | CVE-2016-0787 | libssh2: security vulnerability | 5.9 | |
| High | CVE-2026-66033 | libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation | 7.5 | |
| High | CVE-2026-66032 | libssh2 Double-Free Heap Corruption via sftp_open() | 8.8 | |
| High | CVE-2020-22218 | libssh2: Out-of-Bounds Access | 7.5 | |
| High | CVE-2026-7598 | libssh2 userauth.c userauth_password integer overflow | 7.3 | |
| High | CVE-2026-66035 | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation | 7.5 | |
| High | CVE-2026-58050 | libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation | 7.5 | |
| High | CVE-2026-66034 | libssh2 Heap Out-of-Bounds Read via publickey subsystem | 7.5 | |
| High | CVE-2026-58051 | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup | 6.5 | |
| Not rated | CVE-2015-1782 | libssh2: Denial of Service | — |