Moderate Vulnerability in libssh: Out-of-Bounds Read Issue
Summary
RLSA-2025:18275: Moderate: libssh security update. Affects libssh versions < 0:0.10.4-15.el9_6. Fixed in 0:0.10.4-15.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libssh is a widely-used library that implements the SSH protocol, enabling secure communication for client and server applications. It provides functionalities for secure file transfer, remote command execution, and secure shell access. The library is integral to many applications that require secure data transmission, making its security critical.
Vulnerability Detail
The vulnerability identified as CVE-2025-5318 is an out-of-bounds read in the sftp_handle() function of libssh. This flaw can potentially allow an attacker to read sensitive data from memory, which may lead to information disclosure. The vulnerability arises from improper handling of input data, making it possible for malicious actors to exploit the flaw if they can control the input to the affected function. The CVSS score for this vulnerability is 5.4, indicating a moderate severity level.
How To Fix
Minimum fixed version
0:0.10.4-15.el9_6
This is the first release that contains the fix.
sudo dnf update libsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the available security update as soon as possible.
Conclusion
The libssh library has a moderate vulnerability (CVE-2025-5318) that can lead to information disclosure due to an out-of-bounds read. It is essential to update to the patched version to secure your applications. Regular monitoring and updates are crucial for maintaining security in open-source software.
See every vulnerability recorded for libssh →
FAQ
CVE-2025-5318 is a vulnerability in the libssh library that allows for an out-of-bounds read, potentially leading to information disclosure.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for this vulnerability is 5.4, indicating a moderate severity level.
While there are no specific workarounds available, it is crucial to prioritize updating the package to mitigate the risk associated with this vulnerability.
The libssh library is maintained by the Rocky Enterprise Software Foundation and Red Hat, who are responsible for addressing security issues and providing updates.
Related vulnerabilities
Recent vulnerabilities recorded for libssh.
