CVE-2026-0965

Katalog CVE

CVSS 3.3 · Low EPSS 0,16%

Kerentanan External Control of File Name or Path pada libssh, redhat enterprise linux. Skor CVSS 3.0 3.3 (Low) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

Rincian

Terbit di NVD

26 Maret 2026

Terakhir diubah

1 September 2026

Status NVD

Modified

CVSS 3.0

3.3 (Low), sumber redhat.com
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-73: External Control of File Name or Path

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-0965 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2436980 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2026:18160
• https://access.redhat.com/errata/RHSA-2026:18683