CVE-2026-59848

Undergoing Analysis Undergoing Analysis - In Progress

libssh Memory Leak via Malicious SFTP Server Responses

Publication date: 2026-07-21

Last updated on: 2026-07-30

Assigner: Red Hat, Inc.

Description

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-30

Generated

2026-08-12

AI Q&A

2026-07-21

EPSS Evaluated

2026-08-10

NVD

CVE-2026-59848

EUVD

EUVD-2026-46256

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
libssh	libssh	*
redhat	enterprise_linux	10.0
redhat	hardened_images	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This is a denial of service vulnerability in libssh affecting its client-side SFTP message handling. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

Detection Guidance

Monitor memory usage on systems using libssh for SFTP connections. Check for unusual accumulation of queued SFTP messages by inspecting network traffic for repeated responses with unknown request IDs. Use tools like tcpdump or Wireshark to capture and analyze SFTP traffic for anomalies.

Impact Analysis

If you use a vulnerable libssh client to connect to an untrusted SFTP server, the server could exploit this flaw to consume excessive memory on your system. This may lead to system slowdowns, crashes, or complete denial of service for applications relying on libssh.

Compliance Impact

This vulnerability primarily causes a denial of service by consuming excessive memory on the client side, which could disrupt services handling sensitive data. While not directly violating GDPR or HIPAA, prolonged downtime could impact data availability and processing timelines, potentially affecting compliance with data protection and security requirements.

Mitigation Strategies

Update libssh to the latest patched version. Avoid connecting to untrusted SFTP servers. Implement network-level monitoring to detect and block malicious SFTP traffic patterns. Restrict SFTP access to trusted servers only.

Hi! I’m here to help you understand CVE-2026-59848. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70