CVE-2026-55200

概要

参考情報

• libssh2/libssh2 commit 97acf3d · Patch
• libssh2/libssh2#2052 · Patch
• vulncheck.com/advisories/libssh2-out-of-bounds-write-via-unchecked-packet-length-in-transport-c · Third Party Advisory
• web.archive.org/web/20260623211210/https://github.com/bikini/exploitarium/tree/main/libssh2-cve-2026-55200-poc · Exploit

libssh2 のその他の脆弱性

• CVE-2026-66035高 7.5libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SS…
• CVE-2026-66034高 7.5libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger…
• CVE-2026-66033高 7.5libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() fu…
• CVE-2026-66032高 8.8libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows …
• CVE-2026-58051中 6.5libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so…