CVE Feed

    Dashboard / CVE / CVE-2020-22218

    CVE-2020-22218

    An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

    Published:Aug 22, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 22, 2023
    EPSS Score:0.00084
    CVSS Score:7.5

    Affected Products

    Vendor
    Libssh2
    Product
    Libssh2
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-66035 (CVSS 7.7) — libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerabil…
    CVE-2026-66034 (CVSS 7.7) — libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a m…
    CVE-2026-66033 (CVSS 8.7) — libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability…
    CVE-2026-66032 (CVSS 8.7) — libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() funct…
    CVE-2026-58051 (CVSS 8.3) — libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries bef…
    CVE-2026-58050 (CVSS 8.3) — libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response…
    CVE-2025-15661 (CVSS 8.3) — libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp…
    CVE-2026-55200 (CVSS 9.2) — libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transpor…
    CVE-2026-55199 (CVSS 8.2) — libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability…
    CVE-2026-7598 (CVSS 6.9) — A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function usera…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High