IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
8.8Alta

CVE-2026-59851Libssh: libssh: authentication bypass via missing gssapi principal check

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Hardened Images; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9 Publicada: (hace 3 meses)

Descripción

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.

Debilidad (CWE): CWE-863

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
libssh libssh 0.12.0
redhat enterprise linux 10.0
redhat enterprise linux eus 10.2
redhat enterprise linux for els 10.2
redhat enterprise linux for ibm z systems 10.0_s390x
redhat enterprise linux for ibm z systems els 10.2
redhat enterprise linux for ibm z systems eus 10.2
redhat enterprise linux for power little endian 10.0_ppc64le
redhat enterprise linux for power little endian els 10.2
redhat enterprise linux for power little endian eus 10.2
redhat hardened images —
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 8 —
Red Hat Red Hat Enterprise Linux 9 —
Red Hat Red Hat Hardened Images all versions

Referencias y parches

Coincidencias CPE (NVD) (19)
  • cpe:2.3:a:libssh:libssh:0.12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:arm64:*
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:x86:*
  • cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:arm64:*
  • cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:x86:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:10.2:*:*:*:*:*:arm64:*
  • cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:arm64:*
  • cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:x64:*
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:10.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.2:*:*:*:*:*:*:*

CVE recientes del mismo producto — Red Hat Enterprise Linux

5.5Media
CVE-2026-110330

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Alta
CVE-2026-110331

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…