A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:42922 | Vendor Advisory |
| https://access.redhat.com/security/cve/CVE-2026-59848 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2498181 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Jul 2026, 13:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Libssh libssh
Redhat enterprise Linux Redhat hardened Images Redhat Libssh |
|
| CPE | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:libssh:libssh:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* |
|
| References | () https://access.redhat.com/errata/RHSA-2026:42922 - Vendor Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2026-59848 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2498181 - Issue Tracking, Vendor Advisory |
23 Jul 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-770 |
22 Jul 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Jul 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-21 14:16
Updated : 2026-07-30 13:11
NVD link : CVE-2026-59848
Mitre link : CVE-2026-59848
CVE.ORG link : CVE-2026-59848
JSON object : View
Products Affected
redhat
- hardened_images
- enterprise_linux
libssh
- libssh
CWE
CWE-770
Allocation of Resources Without Limits or Throttling