Lucene search
K

5 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2026/04/06 6:6 a.m.3 views

Security Bulletin: Vulnerability in libssh library (CVE-2025-5372) affects Power HMC.

Summary The libssh library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-5372 DESCRIPTION: A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible...

8.8CVSS6.6AI score0.00301EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.4 views

Alibaba Cloud Linux 3 : 0189: libssh (ALINUX3-SA-2025:0189)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0189 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-5372: A flaw was found in libssh versions...

8.8CVSS7.1AI score0.00301EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/08/25 11:34 p.m.1 views

SUSE CVE-2025-5372

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenl...

7.1CVSS7AI score0.00301EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-5372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to...

8.8CVSS6.6AI score0.00301EPSS
Exploits0References3
OSV
OSV
added 2025/06/25 12:0 a.m.0 views

UBUNTU-CVE-2025-5372

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...

8.8CVSS6.7AI score0.00301EPSS
Exploits0References4
Rows per page
Query Builder