Buffer Overflow Vulnerability in libssh SFTP Server Directory Listing
CVE-2026-15370
6.7MEDIUM
What is CVE-2026-15370?
A security flaw exists in libssh that arises during directory listing in SFTP servers. Due to unsafe concatenation of filenames into a fixed-size stack buffer, an attacker can exploit this vulnerability by controlling the filenames listed by the server. If these filenames are sufficiently long, they may overflow the stack buffer, potentially leading to server crashes or even code execution.
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Tristan for reporting this issue.