CVE-2026-59842

Katalog CVE

CVSS 5.3 · Medium EPSS 0,49%

Kerentanan Out-of-bounds Read pada libssh, redhat hardened images +9 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

Rincian

Terbit di NVD

21 Juli 2026

Terakhir diubah

22 September 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2026:55855 advisory vendor
• https://access.redhat.com/security/cve/CVE-2026-59842 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2498168 issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2026:42922 issue tracking