Critical Out-of-Bounds Read Vulnerability in libssh Package
Summary
ALSA-2025:18275: Moderate: libssh security update. Affects libssh versions < 0.10.4-15.el9_6. Fixed in 0.10.4-15.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libssh is a widely used library that implements the SSH protocol, enabling secure communication between client and server applications. It is known for its versatility and is utilized in various applications requiring secure data transmission. However, recent findings have revealed a critical vulnerability that could potentially expose applications using this library to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2025-5318 is an out-of-bounds read in the sftp_handle() function of the libssh library. This flaw allows an attacker to exploit the library, potentially leading to unauthorized access to sensitive data or application crashes. The issue arises from improper handling of input data, which can result in reading beyond the allocated memory bounds, thereby compromising the integrity and confidentiality of the application.
How To Fix
Minimum fixed version
0.10.4-15.el9_6
This is the first release that contains the fix.
sudo dnf update libsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to limit the exposure of applications using libssh until the update can be applied. This can include restricting access to the application or disabling features that rely on the vulnerable library.
Conclusion
The out-of-bounds read vulnerability in the libssh package poses significant security risks to applications relying on this library. It is crucial for users to update to the patched version to mitigate these risks. By staying informed and proactive, developers can protect their applications from potential exploitation.
See every vulnerability recorded for libssh →
FAQ
CVE-2025-5318 is a security vulnerability in the libssh library that allows for an out-of-bounds read, potentially leading to unauthorized data access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to sensitive data, application crashes, and potential exploitation by attackers to gain control over the affected systems.
Yes, a patch is available in version 0.10.4-15.el9_6 of the libssh package, which addresses the vulnerability.
If an immediate update is not possible, consider implementing access restrictions to the application or disabling features that utilize the libssh library.
Related vulnerabilities
Recent vulnerabilities recorded for libssh.
