A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
CVSS Details
- CVSS 3.1 Base Score: 3.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libssh-configUpgrade libsshUpgrade libssh-devel | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade libssh | Aug 8, 2025 | Jul 22, 2025 |
| Amazon_linux_2023 | — | Upgrade libsshUpgrade libssh-develUpgrade libssh-debugsourceUpgrade libssh-debuginfoUpgrade libssh-config | Sep 9, 2025 | Jun 24, 2025 |
| Debian | — | Upgrade libssh | Jun 26, 2025 | Jun 26, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libssh | Nov 12, 2025 | Oct 23, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libssh | Dec 12, 2025 | Oct 23, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libssh | Nov 12, 2025 | Oct 23, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libssh | Oct 24, 2025 | Oct 23, 2025 |
| Redhat_linux | — | No solution existsUpgrade libssh-debuginfoUpgrade libsshUpgrade libssh-debugsourceUpgrade libssh-configUpgrade libssh-devel | Jul 9, 2025 | Jun 24, 2025 |
| Rocky_linux | — | Upgrade libssh-debugsourceUpgrade libsshUpgrade libssh-develUpgrade libssh-debuginfo | Jun 1, 2026 | May 28, 2026 |
| Suse | — | Upgrade libssh-develUpgrade libssh4Upgrade libssh-devel-docUpgrade libssh4-32bitUpgrade libssh-config | Jul 7, 2025 | Jul 4, 2025 |
| Ubuntu | — | Upgrade libssh-4 (Ubuntu Pro)Upgrade libssh-4 | Jul 8, 2025 | Jun 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 22, 2025 | Jul 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub