CyberRota Analysis
AI-GeneratedA vulnerability exists in libssh where the SFTP server's directory listing process improperly concatenates filenames into a fixed-size stack buffer, allowing for potential buffer overflow. This flaw could lead to server crashes or even arbitrary code execution if an attacker provides specially crafted filenames. Organizations using libssh should prioritize patching this vulnerability to mitigate risks associated with server exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
Related CVEs
Other vulnerabilities affecting the same vendor(s)