2 matches found
CLSA-2025-1762361016 libssh: Fix of CVE-2025-5987
CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized...
Medium: libssh
Issue Overview: The privatekeyfromfile uses an uninitialized variable under certain conditions, such as if the file specified by the filename argument doesn't exist. This causes the code to return an invalid private key. This defect, in turn, might cause signing failure. The bug might also cause ...