CVE-2026-15370
libssh: libssh: stack buffer overflow in SFTP server longname construction
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 21, 2026
Updated · August 18, 2026
Description
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No workaround available.
CVSS / CWE
CVSS 3.1 · 6.7CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-121 · Stack-based Buffer Overflow