CVEvulnerability

CVE-2025-5318

5.4 MEDIUM Published 2025-06-24 Modified 2026-09-08 Official page ↗
Status
Modified
Published
2025-06-24
Last modified
2026-09-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-125

Description

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

Affected configurations

• redhat openshift container platform 4.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • libssh libssh (< 0.11.2)

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References