CVE-2026-59843 – Libssh: libssh: denial of service via zero advertised channel packet size

CVE ID :CVE-2026-59843

Published : July 21, 2026, 11:16 a.m. | 28 minutes ago

Description :A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…