CVE-2026-3731

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada libssh. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. The attack may be performed from remote. Upgrading to version 0.11.4 and 0.12.0 is sufficient to resolve this issue. This patch is called 855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60. You should upgrade the affected component.

Rincian

Terbit di NVD

8 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.com/libssh/libssh-mirror/-/commit/855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60 patch
• https://www.libssh.org/files/0.12/libssh-0.12.0.tar.xz patch · advisory pihak ketiga
• https://vuldb.com/?id.349709 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.767120 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.349709 permissions required · vdb entry
• https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt product