CVE-2026-0965

N/A

Description

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

CVE Details

CVSS v3.1 ScoreN/A

Published3/26/2026

Last Modified4/2/2026

Sourcenvd

Honeypot Sightings0

Affected Products

libssh:libsshredhat:enterprise_linux

Weaknesses (CWE)

CWE-73

References

https://access.redhat.com/security/cve/CVE-2026-0965(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2436980(secalert@redhat.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.