https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T19:25:35.597302+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-14889 CVE-2019-14889 2026-10-11T19:25:35.602637+00:00

Affected: Red Hat libssh

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.

 https://vulnerability.circl.lu/vuln/usn-4219-1 USN-4219-1 — libssh vulnerability 2026-10-11T19:25:35.602837+00:00

Affected: Ubuntu:16.04:LTS: libssh, Ubuntu:18.04:LTS: libssh

It was discovered that libssh incorrectly handled certain scp commands. If a user or automated system were tricked into using a specially-crafted scp command, a remote attacker could execute arbitrary commands on the server.