A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such mani…

A security vulnerability has been identified in libssh2 versions up to 1.11.1. The vulnerability exists in the userauth_password function within the src/userauth.c file. Attackers can manipulate the username_len and password_len arguments to cause an integer overflow condition. This vulnerability can be exploited remotely, making it particularly concerning. A patch has been developed and is available with the commit hash 256d04b60d80bf1190e96b0ad1e91b2174d744b1. Organizations using affected versions of libssh2 should apply the patch immediately to remediate this security issue.