Moderate Security Vulnerability in libssh: Out-of-Bounds Read Issue
Summary
RLSA-2025:18286: Moderate: libssh security update. Affects libssh versions < 0:0.9.6-15.el8_10. Fixed in 0:0.9.6-15.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libssh is a widely used library that implements the SSH (Secure Shell) protocol, enabling secure communication between client and server applications. It is essential for secure data transfer and remote command execution. However, vulnerabilities in such libraries can expose applications to significant security risks, making it crucial to address any identified issues promptly.
Vulnerability Detail
The vulnerability identified as CVE-2025-5318 in libssh is an out-of-bounds read in the sftp_handle() function. This flaw can potentially allow an attacker to read sensitive data from memory, leading to information disclosure. The issue arises from improper handling of input data, which can be exploited if an attacker sends crafted requests to the server. The ramifications of this vulnerability include unauthorized access to sensitive information, which could compromise the integrity and confidentiality of the affected systems.
How To Fix
Minimum fixed version
0:0.9.6-15.el8_10
This is the first release that contains the fix.
sudo dnf update libsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The identified vulnerability in libssh poses a moderate risk due to the potential for information disclosure through an out-of-bounds read. It is crucial to update to the patched version to safeguard your systems against exploitation. Regular monitoring and updates are essential for maintaining security in open-source software.
See every vulnerability recorded for libssh →
FAQ
CVE-2025-5318 is a security vulnerability in the libssh library that allows for an out-of-bounds read, potentially leading to information disclosure.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to access the code.
The vulnerability can lead to unauthorized access to sensitive data, compromising the confidentiality and integrity of the affected systems.
Yes, a patch is available. You should update to libssh version 0:0.9.6-15.el8_10 to mitigate the risk.
The CVSS score for CVE-2025-5318 is 5.4, indicating a moderate level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for libssh.
