CVE-2026-0967
2.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
Summary
A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the match_pattern() function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion, resulting in a Denial of Service (DoS) for the client.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:0.12.0-2.el10 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | 0:0.10.4-18.el9 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | 0:0.10.4-18.el9 < * | unaffected |
Weaknesses
- CWE-1333: Inefficient Regular Expression Complexity
Workarounds
Avoid using complex patterns in configuration files and known_hosts.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://access.redhat.com/errata/RHSA-2026:18160
- https://access.redhat.com/errata/RHSA-2026:18683
- https://access.redhat.com/security/cve/CVE-2026-0967
- https://bugzilla.redhat.com/show_bug.cgi?id=2436981
- https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.