A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:42922 | Vendor Advisory |
| https://access.redhat.com/security/cve/CVE-2026-59845 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2498178 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Jul 2026, 13:12
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Libssh libssh
Redhat enterprise Linux Redhat hardened Images Redhat Libssh |
|
| CPE | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:libssh:libssh:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* |
|
| References | () https://access.redhat.com/errata/RHSA-2026:42922 - Vendor Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2026-59845 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2498178 - Issue Tracking, Vendor Advisory |
23 Jul 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-390 |
22 Jul 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-21 12:18
Updated : 2026-07-30 13:12
NVD link : CVE-2026-59845
Mitre link : CVE-2026-59845
CVE.ORG link : CVE-2026-59845
JSON object : View
Products Affected
redhat
- hardened_images
- enterprise_linux
libssh
- libssh
CWE
CWE-390
Detection of Error Condition Without Action