Out-of-Bounds Read Vulnerability in libssh Affecting Sensitive Data
CVE-2025-5318
8.1HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 24 June 2025
What is CVE-2025-5318?
A flaw in the libssh library triggers an out-of-bounds read in the sftp_handle function due to an improper comparison check. This allows for accessing memory outside the valid handle list, potentially leading to the exposure of sensitive data or disruption of service behavior. An authenticated remote attacker could exploit this vulnerability to read unintended memory regions, which raises significant security concerns for applications utilizing the library.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Ronald Crane for reporting this issue.