libssh: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• High 8.1
  CVE-2025-5987

  Libssh: invalid return code for chacha20 poly1305 with openssl backend

  A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenS…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 7, 2025
• Medium 6.5
  CVE-2025-5351

  Libssh: double free vulnerability in libssh key export functions

  A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a poten…

  Red Hat libssh Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Alpine
  Jul 4, 2025
• Medium 6.5
  CVE-2025-5449

  Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

  A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation an…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Alpine
  Jul 25, 2025
• Medium 5.4
  CVE-2025-5318

  Libssh: out-of-bounds read in sftp_handle()

  A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 24, 2025
• Medium 5.0
  CVE-2025-5372

  Libssh: incorrect return code handling in ssh_kdf() in libssh

  A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses…

  Red Hat libssh Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Alpine
  Jul 4, 2025
• Medium 4.5
  CVE-2025-4877

  Libssh: write beyond bounds in binary to base64 conversion functions

  There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory u…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine
  Aug 20, 2025
• Low 3.6
  CVE-2025-4878

  Libssh: use of uninitialized variable in privatekey_from_file()

  A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failur…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jul 22, 2025

Revision history

1. 2026-10-13 #48

   Neue Updates von IBM aufgenommen

2. 2026-10-04 #47

   Neue Updates von IBM aufgenommen

3. 2026-07-21 #46

   Neue Updates von IBM aufgenommen

4. 2026-06-14 #45

   Neue Updates von Red Hat aufgenommen

5. 2026-06-07 #44

   Neue Updates von Red Hat aufgenommen

6. 2026-05-28 #43

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

7. 2026-05-25 #42

   Neue Updates von Red Hat aufgenommen

8. 2026-05-19 #41

   Neue Updates von Red Hat aufgenommen

9. 2026-03-31 #40

   Neue Updates von IBM aufgenommen

10. 2026-03-04 #39

    Neue Updates von Red Hat aufgenommen

11. 2026-03-01 #38

    Neue Updates von Red Hat aufgenommen

12. 2026-02-05 #37

    Neue Updates von Red Hat aufgenommen

13. 2026-02-04 #36

    Neue Updates von Red Hat aufgenommen

14. 2026-02-03 #35

    Neue Updates von Red Hat aufgenommen

15. 2026-02-01 #34

    Neue Updates von Red Hat aufgenommen

16. 2026-01-27 #33

    Neue Updates von Red Hat aufgenommen

17. 2026-01-22 #32

    Neue Updates von Red Hat aufgenommen

18. 2026-01-21 #31

    Neue Updates von Red Hat aufgenommen

19. 2026-01-12 #30

    Neue Updates von Red Hat aufgenommen

20. 2026-01-11 #29

    Neue Updates von Red Hat aufgenommen

21. 2026-01-04 #28

    Neue Updates von IBM aufgenommen

22. 2025-12-18 #27

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

23. 2025-12-17 #26

    Neue Updates von Red Hat, IBM und Oracle Linux aufgenommen

24. 2025-12-09 #25

    Neue Updates von Red Hat aufgenommen

25. 2025-12-03 #24

    Neue Updates von Oracle Linux aufgenommen

References

• libssh. org vom 2025-06-29
  https://www.libssh.org/2025/06/24/libssh-0-11-2-security-and-bugfix-release/
• libssh security and bugfix release vom 2025-06-29
  https://seclists.org/oss-sec/2025/q2/284
• SUSE Security Update SUSE-SU-2025:02229-1 vom 2025-07-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021759.html
• Ubuntu Security Notice USN-7619-1 vom 2025-07-07
  https://ubuntu.com/security/notices/USN-7619-1
• SUSE Security Update SUSE-SU-2025:02281-1 vom 2025-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021789.html
• SUSE Security Update SUSE-SU-2025:02279-1 vom 2025-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021791.html
• SUSE Security Update SUSE-SU-2025:02278-1 vom 2025-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021792.html
• Fedora Security Advisory FEDORA-2025-18E8506D3A vom 2025-07-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-18e8506d3a
• SUSE Security Update SUSE-SU-2025:02755-1 vom 2025-08-12
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022132.html
• Ubuntu Security Notice USN-7696-1 vom 2025-08-19
  https://ubuntu.com/security/notices/USN-7696-1
• SUSE Security Update SUSE-SU-2025:20557-1 vom 2025-08-19
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022231.html
• SUSE Security Update SUSE-SU-2025:20596-1 vom 2025-08-29
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022366.html
• IBM Security Bulletin 7246875 vom 2025-10-01
  https://www.ibm.com/support/pages/node/7246875
• Red Hat Security Advisory RHSA-2025:18231 vom 2025-10-16
  https://access.redhat.com/errata/RHSA-2025:18231
• Oracle Linux Security Advisory ELSA-2025-18275 vom 2025-10-17
  https://linux.oracle.com/errata/ELSA-2025-18275.html
• Rocky Linux Security Advisory RLSA-2025:18275 vom 2025-10-18
  https://errata.build.resf.org/RLSA-2025:18275
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2025:18286
• Rocky Linux Security Advisory RLSA-2025:18231 vom 2025-10-18
  https://errata.build.resf.org/RLSA-2025:18231
• Dell Security Advisory DSA-2025-404 vom 2025-10-31
  https://www.dell.com/support/kbdoc/000385435
• Red Hat Security Advisory RHSA-2025:19401 vom 2025-11-03
  https://access.redhat.com/errata/RHSA-2025:19401
• Red Hat Security Advisory RHSA-2025:19400 vom 2025-11-03
  https://access.redhat.com/errata/RHSA-2025:19400
• Red Hat Security Advisory RHSA-2025:19470 vom 2025-11-03
  https://access.redhat.com/errata/RHSA-2025:19470
• Red Hat Security Advisory RHSA-2025:19472 vom 2025-11-03
  https://access.redhat.com/errata/RHSA-2025:19472
• Dell Security Advisory DSA-2025-390 vom 2025-11-05
  https://www.dell.com/support/kbdoc/000385230
• Red Hat Security Advisory RHSA-2025:19300 vom 2025-11-05
  https://access.redhat.com/errata/RHSA-2025:19300
• Red Hat Security Advisory RHSA-2025:19313 vom 2025-11-05
  https://access.redhat.com/errata/RHSA-2025:19313
• Red Hat Security Advisory RHSA-2025:19807 vom 2025-11-08
  https://access.redhat.com/errata/RHSA-2025:19807
• Red Hat Security Advisory RHSA-2025:21013 vom 2025-11-11
  https://access.redhat.com/errata/RHSA-2025:21013
• Red Hat Security Advisory RHSA-2025:20943 vom 2025-11-11
  https://access.redhat.com/errata/RHSA-2025:20943
• Red Hat Security Advisory RHSA-2025:21977 vom 2025-11-24
  https://access.redhat.com/errata/RHSA-2025:21977
• Rocky Linux Security Advisory RLSA-2025:21977 vom 2025-11-25
  https://errata.build.resf.org/RLSA-2025:21977
• Oracle Linux Security Advisory ELSA-2025-21977 vom 2025-11-25
  https://linux.oracle.com/errata/ELSA-2025-21977.html
• Red Hat Security Advisory RHSA-2025:21829 vom 2025-11-27
  https://access.redhat.com/errata/RHSA-2025:21829
• Meinberg Security Advisory MBGSA-2025.05 vom 2025-11-27
  https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-05-lantime-firmware-v7-08-025.htm
• Rocky Linux Security Advisory RLSA-2025:18286 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2025:18286
• NetApp Security Advisory NTAP-20251128-0005 vom 2025-11-28
  https://security.netapp.com/advisory/NTAP-20251128-0005
• Oracle Linux Security Advisory ELSA-2025-21013 vom 2025-12-04
  https://linux.oracle.com/errata/ELSA-2025-21013.html
• Red Hat Security Advisory RHSA-2025:23024 vom 2025-12-10
  https://access.redhat.com/errata/RHSA-2025:23024
• Red Hat Security Advisory RHSA-2025:23484 vom 2025-12-18
  https://access.redhat.com/errata/RHSA-2025:23484
• IBM Security Bulletin 7255154 vom 2025-12-17
  https://www.ibm.com/support/pages/node/7255154
• Oracle Linux Security Advisory ELSA-2025-23484 vom 2025-12-18
  https://linux.oracle.com/errata/ELSA-2025-23484.html
• Rocky Linux Security Advisory RLSA-2025:23484 vom 2025-12-18
  https://errata.build.resf.org/RLSA-2025:23484
• Red Hat Security Advisory RHSA-2025:23483 vom 2025-12-18
  https://access.redhat.com/errata/RHSA-2025:23483
• Oracle Linux Security Advisory ELSA-2025-23483 vom 2025-12-18
  https://linux.oracle.com/errata/ELSA-2025-23483.html
• Rocky Linux Security Advisory RLSA-2025:23483 vom 2025-12-19
  https://errata.build.resf.org/RLSA-2025:23483
• IBM Security Bulletin 7256201 vom 2026-01-05
  https://www.ibm.com/support/pages/node/7256201
• Red Hat Security Advisory RHSA-2026:0431 vom 2026-01-12
  https://access.redhat.com/errata/RHSA-2026:0431
• Red Hat Security Advisory RHSA-2026:0428 vom 2026-01-12
  https://access.redhat.com/errata/RHSA-2026:0428
• Red Hat Security Advisory RHSA-2026:0430 vom 2026-01-12
  https://access.redhat.com/errata/RHSA-2026:0430
• Red Hat Security Advisory RHSA-2026:0427 vom 2026-01-12
  https://access.redhat.com/errata/RHSA-2026:0427
• Red Hat Security Advisory RHSA-2026:0934 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:0934
• Red Hat Security Advisory RHSA-2026:0950 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:0950
• Red Hat Security Advisory RHSA-2026:0702 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:0702
• Red Hat Security Advisory RHSA-2026:0978 vom 2026-01-27
  https://access.redhat.com/errata/RHSA-2026:0978
• Red Hat Security Advisory RHSA-2026:0996 vom 2026-01-30
  https://access.redhat.com/errata/RHSA-2026:0996
• Red Hat Security Advisory RHSA-2026:0985 vom 2026-01-30
  https://access.redhat.com/errata/RHSA-2026:0985
• Red Hat Security Advisory RHSA-2026:0980 vom 2026-02-03
  https://access.redhat.com/errata/RHSA-2026:0980
• Red Hat Security Advisory RHSA-2026:1539 vom 2026-02-04
  https://access.redhat.com/errata/RHSA-2026:1539
• Red Hat Security Advisory RHSA-2026:1541 vom 2026-02-05
  https://access.redhat.com/errata/RHSA-2026:1541
• Red Hat Security Advisory RHSA-2026:3461 vom 2026-02-27
  https://access.redhat.com/errata/RHSA-2026:3461
• Red Hat Security Advisory RHSA-2026:3462 vom 2026-02-27
  https://access.redhat.com/errata/RHSA-2026:3462
• Red Hat Security Advisory RHSA-2026:3415 vom 2026-03-05
  https://access.redhat.com/errata/RHSA-2026:3415
• IBM Security Bulletin 7268149 vom 2026-03-31
  https://www.ibm.com/support/pages/node/7268149
• Red Hat Security Advisory RHSA-2026:18683 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:18683
• Red Hat Security Advisory RHSA-2026:20610 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20610
• Rocky Linux Security Advisory RLSA-2026:18683 vom 2026-05-28
  https://errata.build.resf.org/RLSA-2026:18683
• Red Hat Security Advisory RHSA-2026:24349 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24349
• Red Hat Security Advisory RHSA-2026:25911 vom 2026-06-15
  https://access.redhat.com/errata/RHSA-2026:25911
• IBM Security Bulletin 7280218 vom 2026-07-21
  https://www.ibm.com/support/pages/node/7280218
• IBM Security Bulletin 7290794 vom 2026-10-03
  https://www.ibm.com/support/pages/node/7290794
• IBM Security Bulletin 7291420 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7291420
• IBM Security Bulletin 7291495 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7291495