Lucene search
+L

2504 matches found

Mend
Mend
•added 2025/07/24 2:14 p.m.•4 views

CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

5.7CVSS0.00241EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2025/07/24 2:14 p.m.•66 views

CVE-2025-8114 Libssh: null pointer dereference in libssh kex session id calculation

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

4.7CVSS0.00241EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2025/07/24 2:14 p.m.•14 views

CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

4.7CVSS6.1AI score0.00241EPSS
SaveExploits0
Redos
Redos
•added 2025/07/24 12:00 a.m.•12 views

ROS-20250724-10

A vulnerability in the LibSSH client authentication library is related to boundary conditions in the function sftphandle... Exploitation of the vulnerability could allow an attacker acting remotely to gain access to potentially sensitive information...

8.1CVSS6AI score0.01841EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/07/24 12:00 a.m.•12 views

libssh code-related vulnerabilities

libssh is a C development package from the libssh organization for accessing SSH services that can perform remote commands, file transfers, and also provide a secure transport channel for remote programs. A code issue vulnerability exists in libssh that stems from a possible null pointer...

4.7CVSS6.4AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/24 12:00 a.m.•2 views

CVE-2025-8114: NULL Pointer Dereference

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

4.7CVSS5.9AI score0.00241EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/07/22 3:15 p.m.•17 views

DEBIAN-CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00212EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/07/22 3:15 p.m.•24 views

AZL-65643 CVE-2025-4878 affecting package libssh for versions less than 0.10.6-3

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00212EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/07/22 3:15 p.m.•15 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

5.8AI score0.00212EPSS
SaveExploits0References4
NVD
NVD
•added 2025/07/22 3:15 p.m.•15 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00212EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2025/07/22 3:15 p.m.•20 views

AZL-65646 CVE-2025-4878 affecting package libssh for versions less than 0.10.6-3

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.3AI score0.00212EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/07/22 2:17 p.m.•30 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00212EPSS
SaveExploits0
attackerkb
attackerkb
•added 2025/07/22 2:17 p.m.•14 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.6AI score0.00212EPSS
SaveExploits0References7
Mend
Mend
•added 2025/07/22 2:17 p.m.•5 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00212EPSS
SaveExploits0References7
CVE
CVE
•added 2025/07/22 2:17 p.m.•108 views

CVE-2025-4878

CVE-2025-4878 affects libssh. The vulnerability is due to an uninitialized variable in privatekey_from_file() that can be triggered when the filename does not exist, potentially causing signing failures, use-after-free, or memory corruption. Public sources in connected documents confirm this issu...

3.6CVSS6AI score0.00212EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/07/22 2:17 p.m.•9 views

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00212EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/07/22 2:17 p.m.•52 views

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00212EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2025/07/22 2:17 p.m.•22 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.1AI score0.00212EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•3 views

CVE-2025-4878: Use After Free

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS5.7AI score0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/22 12:00 a.m.•16 views

libssh resource management error vulnerability

libssh is a C development package from the libssh organization for accessing SSH services that can execute remote commands, file transfers, and also provide a secure transport channel for remote programs. A resource management error vulnerability exists in libssh that stems from the presence of...

3.6CVSS7.5AI score0.00212EPSS
SaveExploits0References3
Rows per page
Query Builder