GHSA-6jpg-fr24-wpvfLowCVSS 2.2

A flaw was found in libssh. A remote attacker, by controlling client configuration files or...

Published
March 26, 2026
Last Modified
May 19, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the `match_pattern()` function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion, resulting in a Denial of Service (DoS) for the client.

🔗 References (7)