Сообщество свободного программного обеспечения libssh

Name: Сообщество свободного программного обеспечения libssh
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical9high14medium1low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	2 versions
CVE-2018-10933US	critical9.1	91.8% (100th)	Exploit	no fix	2018-10-17	2 versions
CVE-2021-3634US	medium6.5	4.68% (92nd)	—	no fix	2021-08-31	≤ 0.9.4
CVE-2020-16135US	medium5.9	4.11% (91st)	—	no fix	2020-07-29	≤ 0.9.4
CVE-2019-14889US	high8.8	3.17% (88th)	—	no fix	2019-12-10	2 versions
CVE-2020-1730US	medium5.3	3.14% (88th)	—	no fix	2020-04-13	2 versions
CVE-2025-5318US	—	1.84% (79th)	—	no fix	2025-06-24	≤ 0.11.2
CVE-2025-5987US	—	1.73% (77th)	—	no fix	2025-07-07	≤ 0.11.2
CVE-2023-6918US	medium5.3	1.41% (72nd)	—	no fix	2023-12-19	2 versions
CVE-2023-1667US	medium6.5	1.31% (71st)	—	no fix	2023-05-26	2 versions
CVE-2023-2283US	medium6.5	1.06% (64th)	—	no fix	2023-05-26	2 versions
CVE-2025-5449US	—	1.03% (63rd)	—	no fix	2025-07-25	≤ 0.11.2
CVE-2023-3603US	medium6.5	0.90% (60th)	—	no fix	2023-07-21	≤ 0.8.9
CVE-2026-59843US	—	0.73% (54th)	—	no fix	2026-07-21	≤ 0.12.2
CVE-2026-3731US	high7.5	0.66% (51st)	—	no fix	2026-03-08	≤ 0.11.3
CVE-2025-5351US	—	0.61% (49th)	—	no fix	2025-07-04	≤ 0.11.2
CVE-2026-0966US	high8.2	0.60% (49th)	—	no fix	2026-03-26	≤ 0.10.4
CVE-2026-59844US	—	0.57% (47th)	—	no fix	2026-07-21	≤ 0.12.2
CVE-2025-5372US	high8.8	0.50% (43rd)	—	no fix	2025-07-04	≤ 0.11.2
CVE-2026-59842US	medium5.3	0.49% (42nd)	—	no fix	2026-07-21	≤ 0.12.2
CVE-2026-59851US	—OT elevated	0.49% (42nd)	—	no fix	2026-07-21	≤ 0.12.1
CVE-2026-0968US	low3.1	0.46% (40th)	—	no fix	2026-03-26	≤ 0.10.4
CVE-2023-6004US	medium4.8	0.45% (39th)	—	no fix	2024-01-03	3 versions
CVE-2026-59849US	high7.5	0.44% (38th)	—	no fix	2026-07-21	2 versions
CVE-2025-8277US	—	0.43% (37th)	—	no fix	2025-09-09	≤ 0.6.0
CVE-2026-0964US	medium6.3	0.42% (37th)	—	no fix	2026-03-26	≤ 0.10.4
CVE-2026-59850US	high7.5	0.35% (28th)	—	no fix	2026-07-21	≤ 0.12.2
CVE-2026-59848US	—	0.34% (27th)	—	no fix	2026-07-21	≤ 0.12.2
CVE-2026-59847US	high7.5	0.33% (26th)	—	no fix	2026-07-21	2 versions
CVE-2025-8114US	medium4.7	0.26% (18th)	—	no fix	2025-07-24	≤ 0.11.2
CVE-2026-0967US	medium5.5	0.23% (14th)	—	no fix	2026-03-26	≤ 0.10.4
CVE-2025-4878US	—	0.23% (13th)	—	no fix	2025-07-22	≤ 0.11.2
CVE-2025-4877US	—	0.20% (10th)	—	no fix	2025-08-20	≤ 0.11.2
CVE-2026-15370US	high7.3	0.17% (6th)	—	no fix	2026-07-21	2 versions
CVE-2026-0965US	—	0.16% (6th)	—	no fix	2026-03-26	≤ 0.10.4
CVE-2025-14821US	high7.0	0.13% (3rd)	—	no fix	2026-04-07	≤ 0.11.4
CVE-2026-59846US	—	0.12% (2nd)	—	no fix	2026-07-21	≤ 0.12.2
CVE-2026-59845US	medium5.9	0.10% (1st)	—	no fix	2026-07-21	≤ 0.12.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-252Unchecked Return Value2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan