SUSE-SU-2026:20524-1: libssh&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 26-02-2026Last modified 23-03-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:20524-1 is a vulnerability in libssh&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2026-0964CVE-2026-0965CVE-2026-0966CVE-2026-0967CVE-2026-0968

Timeline

  1. 26-02-2026
    PublishedVulnerability first disclosed.
  2. 23-03-2026
    Last modifiedVulnerability information updated.

Description

Security update for libssh This update for libssh fixes the following issues: - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049) - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045) - CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054) - CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081) - CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse1 product
  • libssh&distro=SUSE Linux Micro 6.0< 0.10.6-4.1

1 vendor · 1 product

References

11 links
Show all 11 references