Lucene search
+L

4 matches found

RedHat Linux
RedHat Linux
•added 2026/06/08 2:12 a.m.•32 views

libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...

8.8CVSS6.5AI score0.00501EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/19 12:00 a.m.•3 views

PT-2025-46072

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh kdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistaken...

8.8CVSS6.6AI score0.00501EPSS
SaveExploits0References8
osv_clsa
osv_clsa
•added 2025/10/07 5:12 p.m.•19 views

CLSA-2025-1759857168 libssh: Fix of CVE-2025-5372

CVE-2025-5372: uninitialized key buffers caused by inconsistent sshkdf return value...

8.8CVSS6.7AI score0.00501EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2025/10/01 2:54 p.m.•20 views

CLSA-2025-1759330475 libssh: Fix of CVE-2025-5372

CVE-2025-5372: uninitialized key buffers caused by inconsistent sshkdf return value...

8.8CVSS6.7AI score0.00501EPSS
SaveExploits0References1
Rows per page
Query Builder