CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

libssh 资源管理错误漏洞

libssh is a C development package from the libssh organization for accessing SSH services that can execute remote commands, file transfers, and also provide a secure transport channel for remote programs. A resource management error vulnerability exists in libssh that stems from the presence of...

Azure Linux 3.0 Security Update: libssh (CVE-2025-5987)

The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5987 advisory. - A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to...

CBL Mariner 2.0 Security Update: libssh (CVE-2025-5351)

The version of libssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5351 advisory. - A flaw was found in the key export functionality of libssh. The issue occurs in the internal function...

CBL Mariner 2.0 Security Update: libssh (CVE-2025-5372)

The version of libssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5372 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf...

CBL Mariner 2.0 Security Update: libssh (CVE-2025-5987)

The version of libssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5987 advisory. - A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to...

Azure Linux 3.0 Security Update: libssh (CVE-2025-5351)

The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5351 advisory. - A flaw was found in the key export functionality of libssh. The issue occurs in the internal function...

CBL Mariner 2.0 Security Update: libssh (CVE-2025-5318)

The version of libssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5318 advisory. - A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered i...

Azure Linux 3.0 Security Update: libssh (CVE-2025-5372)

The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5372 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf...

Azure Linux 3.0 Security Update: libssh (CVE-2025-5318)

The version of libssh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5318 advisory. - A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered i...

CVE-2025-5318 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5318 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5987 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5987 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5372 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5372 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5351 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5351 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5318 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5318 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5351 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5351 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5987 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5987 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

CVE-2025-5372 affecting package libssh for versions less than 0.10.6-2

CVE-2025-5372 affecting package libssh for versions less than 0.10.6-2. A patched version of the package is available...

Libssh: out-of-bounds read in sftp_handle()

...