A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
CVSS Details
- CVSS 3.1 Base Score: 3.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsshalma-upgrade-libssh-configalma-upgrade-libssh-devel | May 27, 2026 | May 19, 2026 | |
| Alpine Linux | alpine-linux-upgrade-libssh | Aug 8, 2025 | Jul 22, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libsshamazon-linux-2023-upgrade-libssh-configamazon-linux-2023-upgrade-libssh-debuginfoamazon-linux-2023-upgrade-libssh-debugsourceamazon-linux-2023-upgrade-libssh-devel | Sep 9, 2025 | Jun 24, 2025 | |
| Debian | debian-upgrade-libssh | Jun 26, 2025 | Jun 26, 2025 | |
| Dell Powerstore Dsa2025429 | dell-powerstoreos-upgrade-latest | Dec 3, 2025 | Dec 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libssh | Nov 12, 2025 | Oct 23, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libssh | Dec 12, 2025 | Oct 23, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libssh | Nov 12, 2025 | Oct 23, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-libssh | Oct 24, 2025 | Oct 23, 2025 | |
| Redhat_linux | redhat-upgrade-libsshredhat-upgrade-libssh-configredhat-upgrade-libssh-debuginforedhat-upgrade-libssh-debugsourceredhat-upgrade-libssh-devel | Jul 9, 2025 | Jun 24, 2025 | |
| Rocky_linux | rocky-upgrade-libsshrocky-upgrade-libssh-debuginforocky-upgrade-libssh-debugsourcerocky-upgrade-libssh-devel | Jun 1, 2026 | May 28, 2026 | |
| Suse | — | suse-upgrade-libssh-configsuse-upgrade-libssh-develsuse-upgrade-libssh-devel-docsuse-upgrade-libssh4suse-upgrade-libssh4-32bit | Jul 7, 2025 | Jul 4, 2025 |
| Ubuntu | ubuntu-pro-upgrade-libssh-4ubuntu-upgrade-libssh-4 | Jul 8, 2025 | Jun 25, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Aug 22, 2025 | Jul 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub