A high-severity integer underflow flaw in libssh2 can be exploited by an unauthenticated attacker to cause a crash, resulting in a denial of service.

This vulnerability involves an integer underflow (CWE-191) and an out-of-bounds read (CWE-125) occurring during the negotiation of AES-GCM ciphers. An unauthenticated attacker can trigger this flaw by sending a specifically crafted request to the library.

The primary impact is the potential for service unavailability, as a successful exploit will crash the process using the library. With a CVSS score of 7.5, this vulnerability represents a significant risk to the stability of any application relying on libssh2 for secure communication.

Immediate Action: Update libssh2 to the version containing the fix found in commit a2ed82d40964bbc0d64cd717aa0a5a892117d2e6 or higher.

Proactive Monitoring: Monitor system logs for process crashes or service restarts that may indicate exploitation attempts.

Compensating Controls: Implement rate limiting or WAF rules, if applicable, to filter malformed SSH negotiation packets.

Public Exploit Available: No confirmed public exploit available.

Organizations using libssh2 must identify all dependent applications and ensure they are recompiled or updated against the patched version. Given the ubiquity of libssh2, this update should be treated as a high-priority maintenance task.