4 matches found
libssh: Incorrect Return Code Handling in ssh_kdf() in libssh
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenl...
8.8CVSS6.5AI score0.00501EPSS
SaveExploits0References4
PT-2025-46072
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh kdf function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistaken...
8.8CVSS6.6AI score0.00501EPSS
SaveExploits0References8
20