CVE-2026-0966 identifies a vulnerability in the libssh library, where the ssh_get_hexa() API function is susceptible to zero-length input. This flaw can be remotely triggered during GSSAPI authentication if the server's logging verbosity is set to SSH_LOG_PACKET. Rated Medium with a CVSS score of 6.5, it presents a network attack vector with low complexity, requiring no privileges or user interaction. The primary impact is a low availability impact, potentially causing a self-denial-of-service for the per-connection daemon process. Currently, there is no evidence of active exploitation, nor is public exploit code available, with minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.11.4CPE matchmatch criteria | cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:* | ||
4.0CPE matchmatch criteria | cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.