Multiple CVEs Discovered in Mageia's libssh Affecting Resource Management

Multiple CVEs Discovered in Mageia's libssh Affecting Resource Management

8h ago •Linuxsecurity •72% similarity •57.8
Share:

Article Content

Browse articles
ThreatCluster

Mageia has reported several vulnerabilities in its libssh implementation, with the most recent advisories detailing five new CVEs (CVE-2026-0964 to CVE-2026-0968) published on March 26, 2026. These vulnerabilities include improper sanitation of paths from SCP servers, potential resource exhaustion, and memory corruption risks. The earlier advisory (CVE-2025-4877 to CVE-2025-5987) from June 10, 2026, highlighted issues like double free errors and invalid return codes. Affected systems include Mageia 9 with libssh version 0.10.6. The vulnerabilities could potentially allow attackers to exploit misconfigurations or malformed inputs, leading to denial of service or memory corruption. Users are advised to update their systems to mitigate these risks. The advisories emphasize the importance of proper configuration and input validation in secure communications.

Key Points: • Five new CVEs related to libssh were published on March 26, 2026. • Vulnerabilities include resource exhaustion and memory corruption risks. • Users of Mageia 9 with libssh version 0.10.6 are urged to update their systems.

ThreatCluster AI

Timeline

2025-06-24
CVE-2025-5318 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-04
CVE-2025-5351 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-04
CVE-2025-5372 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-22
CVE-2025-4878 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-25
CVE-2025-5449 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-0964 to CVE-2026-0968 published
Mageia disclosed multiple vulnerabilities in libssh affecting path sanitation and memory management.
Linuxsecurity
2026-03-26
CVE-2026-0967 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-0965 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-03-26
CVE-2026-0966 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-10
CVE-2025-4877 to CVE-2025-5987 published
Mageia released an advisory detailing vulnerabilities in libssh, including double free errors and invalid return codes.
Linuxsecurity

Extracted Entities

1 / 2

Community

Browse all →