libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response

🗓️ 25 Jun 2026 20:59:04Reported by RedHatType

Libssh2 flaw enables information disclosure and DoS via crafted SFTP response in sftp_symlink, causing out-of-bounds reads.

Reporter	Title	Published	Views	Family All 47
ATTACKERKB	CVE-2025-15661	18 Jun 202620:18	–	attackerkb
AlpineLinux	CVE-2025-15661	18 Jun 202620:18	–	alpinelinux
CBLMariner	CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4	8 Jul 202616:02	–	cbl_mariner
Chainguard	CVE-2025-15661 vulnerabilities	14 Jul 202614:17	–	cgr
Circl	CVE-2025-15661	18 Jun 202621:18	–	circl
CVE	CVE-2025-15661	18 Jun 202620:18	–	cve
Cvelist	CVE-2025-15661 libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c	18 Jun 202620:18	–	cvelist
Debian	[SECURITY] [DSA 6365-1] libssh2 security update	25 Jun 202618:20	–	debian
Debian CVE	CVE-2025-15661	18 Jun 202620:18	–	debiancve
Tenable Nessus	Debian dsa-6365 : libssh2-1-dev - security update	26 Jun 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Hardened Images	any	aarch64	libssh2	1.11.1-9.hum1	libssh2-1.11.1-9.hum1.aarch64.rpm
Red Hat Hardened Images	any	x86_64	libssh2	1.11.1-9.hum1	libssh2-1.11.1-9.hum1.x86_64.rpm
Red Hat Hardened Images	any	noarch	libssh2-docs	1.11.1-9.hum1	libssh2-docs-1.11.1-9.hum1.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-15661
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/libssh2/libssh2/commit/2dae3024897e1898d389835151f4e9606227721d
github	www.github.com/libssh2/libssh2/pull/1705
github	www.github.com/libssh2/libssh2/pull/1717
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-15661
cve	www.cve.org/CVERecord
vulncheck	www.vulncheck.com/advisories/libssh2-heap-buffer-over-read-via-sftp-symlink-in-sftp-c

26 Jul 2026 18:19Current

7High risk

Vulners AI Score7

CVSS 3.16.5

CVSS 48.3

EPSS0.0103

SSVC