libssh

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication,…CVE-2018-10933Libssh · CVSS 9.1 · 92% likely

   CWE-592

2. Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified…CVE-2012-4562Libssh · 13% likely

   CWE-189

3. Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.CVE-2012-4560Libssh · 6.5% likely

   CWE-119

4. Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sf…CVE-2012-4559Libssh · 5.2% likely

   CWE-399

5. Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kex…CVE-2014-8132Libssh · 5.1% likely
6. The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an inv…CVE-2012-4561Libssh · 4.8% likely
7. A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_has…CVE-2021-3634Libssh · 4.7% likely

   CWE-787

8. libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.CVE-2020-16135Libssh · 4.1% likely

   CWE-476

9. The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a…CVE-2015-3146Libssh · 4.0% likely
10. Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c…CVE-2012-6063Libssh · 3.6% likely

    CWE-399

11. The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer…CVE-2013-0176Libssh · 3.0% likely

    CWE-399

12. libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes…CVE-2016-0739Libssh · 2.4% likely

    CWE-200

13. A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.CVE-2023-1667Libssh · 1.3% likely

    CWE-476

14. A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation proble…CVE-2023-2283Libssh · 1.1% likely

    CWE-287

15. Processing sftp server read may cause null dereferenceCVE-2023-3603Libssh · CVSS 3.1 · 0.9% likely

    CWE-476

16. libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-boundsCVE-2026-3731Libssh · CVSS 5.3 · 0.7% likely

    CWE-125

17. Libssh: double free vulnerability in libssh key export functionsCVE-2025-5351libssh · CVSS 6.5 · 0.6% likely

    CWE-415

18. Libssh: incorrect return code handling in ssh_kdf() in libsshCVE-2025-5372libssh · CVSS 5 · 0.5% likely

    CWE-682

19. The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the s…CVE-2014-0017Libssh · 0.4% likely

    CWE-310

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.