A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libssh-develUpgrade libssh-configUpgrade libssh | Oct 21, 2025 | Oct 20, 2025 |
| Alpine Linux | — | Upgrade libssh | Aug 8, 2025 | Jun 24, 2025 |
| Amazon_linux_2023 | — | Upgrade libssh-debuginfoUpgrade libssh-develUpgrade libssh-configUpgrade libsshUpgrade libssh-debugsource | Sep 9, 2025 | Jun 24, 2025 |
| Debian | — | Upgrade libssh | Jun 26, 2025 | Jun 24, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libssh | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libssh | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libssh | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libssh | Oct 24, 2025 | Sep 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 15, 2025 |
| Oracle_linux | — | Upgrade libssh-configUpgrade libssh-develUpgrade libssh | Oct 17, 2025 | Jun 24, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Jun 24, 2025 |
| Redhat_linux | — | Upgrade libssh-debuginfoUpgrade libssh-develUpgrade libssh-debugsourceUpgrade libssh-configUpgrade libssh | Jul 9, 2025 | Jun 24, 2025 |
| Rocky_linux | — | Upgrade libssh-debuginfoUpgrade libssh-develUpgrade libsshUpgrade libssh-debugsource | Feb 5, 2026 | Nov 12, 2025 |
| Suse | — | Upgrade libssh4-32bitUpgrade libssh4Upgrade libssh-devel-docUpgrade libssh-develUpgrade libssh-config | Jul 7, 2025 | Jun 24, 2025 |
| Ubuntu | — | Upgrade libssh-4 (Ubuntu Pro)Upgrade libssh-4 | Jul 8, 2025 | Jun 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2025 | Jun 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub