CVE-2026-59845
5.3
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
Summary
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.
Affected Software
| Vendor | Product | Version Range | Status |
|---|
Weaknesses
Workarounds
To mitigate this issue, avoid using the ProxyCommand feature in libssh client configurations. This prevents the vulnerable code path from being exercised, thereby eliminating the risk of local denial of service due to unchecked fork() failures.
References
- https://access.redhat.com/security/cve/CVE-2026-59845
- https://bugzilla.redhat.com/show_bug.cgi?id=2498178
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.