{“lastseen”:””,”description”:”The API function `ssh_get_hexa()` is vulnerable, when 0-lenght\\ninput is provided to this function. This function is used internally\\nin `ssh_get_fingerprint_hash()` and `ssh_print_hexa()` (deprecated),\\nwhich is vulnerable to the same input (length is provided by the\\ncalling application).\\n\\nThe function is also used internally in the gssapi code for logging\\nthe OIDs received by the server during GSSAPI authentication. This\\ncould be triggered remotely, when the server allows GSSAPI authentication\\nand logging verbosity is set at least to SSH_LOG_PACKET (3). This\\ncould cause self-DoS of the per-connection daemon process.”,”published”:”2026-03-26T20:06:28.313Z”,”modified”:”2026-04-11T14:56:45.344Z”,”type”:”cve”,”title”:”Libssh: buffer underflow in ssh_get_hexa() on invalid input”,”source”:”redhat”,”references”:”https:\/\/access.redhat.com\/security\/cve\/CVE-2026-0966\\nhttps:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2433121\\nhttps:\/\/www.libssh.org\/2026\/02\/10\/libssh-0-12-0-and-0-11-4-security-releases\/”,”id”:”CVE-2026-0966″,”bulletinFamily”:””,”cwe”:[“CWE-124″],”cvelist”:null,”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:6.5,”severity”:”MEDIUM”,”vector”:”CVSS:3.0\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:L\/A:L”,”version”:”3.0″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Red Hat Enterprise Linux 10″,”version”:””,”vendor”:”Red Hat”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”The API function `ssh_get_hexa()` is vulnerable, when 0-lenght\\ninput is provided to this function. This function is used internally\\nin `ssh_get_fingerprint_hash()` and `ssh_print_hexa()` (deprecated),\\nwhich is vulnerable to…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,26,12,21,13,7,11,5],"class_list":["post-45160","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-65","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n