CVE-2026-59848 PUBLISHED

Libssh: libssh: denial of service via sftp responses with unknown request ids

Assigner: redhat
Reserved: 07.07.2026 Published: 21.07.2026 Updated: 21.07.2026

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 5.3

Product Status

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: affected
Vendor Red Hat
Product Red Hat Hardened Images
Versions Default: affected

Workarounds

Do not connect to untrusted SFTP servers.

Credits

  • Red Hat would like to thank Aisle Research for reporting this issue.

References