Back Linuxsecurity

Mageia 9 libssh Security Flaw in SCP Causes Resource Exhaustion Issues

Linuxsecurity •LinuxSecurity Advisories • June 12, 2026

Description: CVE-2026-0964 Improper sanitation of paths received from SCP servers CVE-2026-0965 The libssh can attempt to read non-regular files when misconfigured, which could cause resource exhaustion or blocking. CVE-2026-0966 Providing 0-length input for the ssh_get_hexa() causes 1-byte buffer underflow on heap, possibly causing memory corruption. CVE-2026-0967 Pattern matching at various places in libssh could lead to complex backtracking causing timeouts. CVE-2026-0968 Possible read behind bounds of longname

- - - - - - - - - - - -

- 9/core/libssh-0.10.6-1.2.mga9

Publication date: 12 Jun 2026 URL: https: //advisories.mageia.org/MGASA-2026-0202.html Type: security CVE: CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Discovered in Mageia's libssh Affecting Resource Management Mageia has reported several vulnerabilities in its libssh implementation, with the most recent advisories detailing five new CVEs (CVE-2026-0964 to CVE-2026-0968) published on March 26, 2026. These vulnerabilities include improper sanitation of paths from SCP servers, potential resource exhaustion, and memory corruption risks. The earlier advisory (CVE-2025-4877 to CVE-2025-5987) from June 10, 2026, highlighted issues like double free errors and invalid return codes. Affected systems include Mageia 9 with libssh version 0.10.6. The vulnerabilities could potentially allow attackers to exploit misconfigurations or malformed inputs, leading to denial of service or memory corruption. Users are advised to update their systems to mitigate these risks. The advisories emphasize the importance of proper configuration and input validation in secure communications. 2 sources 58

Extracted Entities

Mageia 9 libssh Security Flaw in SCP Causes Resource Exhaustion Issues

The full story

Extracted Entities

CVEs (5)

CWE Weaknesses (1)

Domains (1)

Platforms (2)