Skip to content
Multiple CVEs Discovered in Mageia's libssh Affecting Resource Management

Multiple CVEs Discovered in Mageia's libssh Affecting Resource Management

First seen 13 Jun 2026, 02:56 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 14, 2026 at 02:21 UTC
  • •Five new CVEs related to libssh were published on March 26, 2026.
  • •Vulnerabilities include resource exhaustion and memory corruption risks.
  • •Users of Mageia 9 with libssh version 0.10.6 are urged to update their systems.

Mageia has reported several vulnerabilities in its libssh implementation, with the most recent advisories detailing five new CVEs (CVE-2026-0964 to CVE-2026-0968) published on March 26, 2026. These vulnerabilities include improper sanitation of paths from SCP servers, potential resource exhaustion, and memory corruption risks. The earlier advisory (CVE-2025-4877 to CVE-2025-5987) from June 10, 2026, highlighted issues like double free errors and invalid return codes. Affected systems include Mageia 9 with libssh version 0.10.6. The vulnerabilities could potentially allow attackers to exploit misconfigurations or malformed inputs, leading to denial of service or memory corruption. Users are advised to update their systems to mitigate these risks. The advisories emphasize the importance of proper configuration and input validation in secure communications.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 90d ago How this analysis works

Timeline

2025-06-24
CVE-2025-5318 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-04
CVE-2025-5351 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-04
CVE-2025-5372 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-22
CVE-2025-4878 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-25
CVE-2025-5449 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-0964 to CVE-2026-0968 published
Mageia disclosed multiple vulnerabilities in libssh affecting path sanitation and memory management.
Linuxsecurity
2026-03-26
CVE-2026-0967 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-0965 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-0966 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-10
CVE-2025-4877 to CVE-2025-5987 published
Mageia released an advisory detailing vulnerabilities in libssh, including double free errors and invalid return codes.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track CVE-2025-4877 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (20)

1 / 3