Moderate Security Update for libssh: Out-of-Bounds Read Vulnerability
Summary
ALSA-2025:20943: Moderate: libssh security update. Affects libssh versions < 0.10.4-15.el9_7. Fixed in 0.10.4-15.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libssh is a widely-used library that implements the SSH protocol, enabling secure communication between client and server applications. It is integral for various applications requiring secure data transmission. The library is designed to be flexible and efficient, but like any software, it can be susceptible to vulnerabilities that may compromise its security.
Vulnerability Detail
The vulnerability identified as CVE-2025-5318 is an out-of-bounds read in the sftp_handle() function of libssh. This flaw can lead to unauthorized access to sensitive information or potentially allow an attacker to execute arbitrary code. The issue arises from improper handling of input data, which can result in memory access violations, making it critical to address promptly.
How To Fix
Minimum fixed version
0.10.4-15.el9_7
This is the first release that contains the fix.
sudo dnf update libsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the affected services or limit the use of the sftp_handle() function until the package is updated. However, the best course of action is to apply the update as soon as possible.
Conclusion
The libssh library has a moderate security vulnerability (CVE-2025-5318) that requires immediate attention. By updating to the latest patched version, users can protect their applications from potential exploits. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for libssh →
FAQ
CVE-2025-5318 is a security vulnerability in the libssh library that allows for an out-of-bounds read, potentially exposing sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to update libssh may leave your application vulnerable to attacks that exploit the out-of-bounds read, potentially leading to data breaches or unauthorized access.
Yes, Vulert provides a service that monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
If immediate updates are not possible, consider implementing access restrictions to the affected services as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for libssh.
