Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2025-5351: libssh key export may cause crashes
CVE-2025-5351 · published 1 year ago
Summary
The libssh library used on several Linux platforms can mishandle memory when exporting cryptographic keys, potentially leading to crashes or instability. This affects systems running libssh, including Red Hat OpenShift, Red Hat Enterprise Linux, and Debian packages. Apply the latest libssh updates provided by your Linux vendor to fix the issue.
What to do
- Update debian rootio-libssh to version 0.10.6-0+deb12u1.root.io.11.
- Update debian libssh to version 0.10.6-0+deb12u2.
- Update debian libssh to version 0.11.2-1.
- Update debian libssh to version 0.10.6-0+deb12u1.aikido.12.
- Update debian rootio-libssh to version 0.10.6-0+deb12u1.aikido.12.
- Update libssh to version 0.10.6-0+deb12u1.aikido.12.
- Update rootio-libssh to version 0.10.6-0+deb12u1.aikido.12.
- Update libssh libssh to version 0.11.2 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | libssh | libssh |
>= 0.10.0, < 0.11.2 < 0.11.2 cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* |
| – | redhat | openshift_container_platform |
4.0 cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux |
6.0 7.0 8.0 9.0 10.0 cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| Root:Debian:12 | debian | rootio-libssh |
< 0.10.6-0+deb12u1.root.io.11 < 0.10.6-0+deb12u1.aikido.12 Fix: upgrade to 0.10.6-0+deb12u1.root.io.11
|
| – | red hat | red hat enterprise linux 9 | All versions |
| – | red hat | red hat enterprise linux 10 | All versions |
| – | red hat | red hat enterprise linux 6 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat openshift container platform 4 | All versions |
| Debian:12 | debian | libssh |
< 0.10.6-0+deb12u2 Fix: upgrade to 0.10.6-0+deb12u2
|
| Debian:13 | debian | libssh |
< 0.11.2-1 Fix: upgrade to 0.11.2-1
|
| Debian:14 | debian | libssh |
< 0.11.2-1 Fix: upgrade to 0.11.2-1
|
| Root:Debian:12 | debian | libssh |
< 0.10.6-0+deb12u1.aikido.12 Fix: upgrade to 0.10.6-0+deb12u1.aikido.12
|
| Root:Debian:12 | – | libssh |
< 0.10.6-0+deb12u1.aikido.12 Fix: upgrade to 0.10.6-0+deb12u1.aikido.12
|
| Root:Debian:12 | – | rootio-libssh |
< 0.10.6-0+deb12u1.aikido.12 Fix: upgrade to 0.10.6-0+deb12u1.aikido.12
|
Original advisory text
Libssh: double free vulnerability in libssh key export functions
A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.
References
- https://access.redhat.com/errata/RHSA-2026:18683 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-5351 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2369367 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2025-5351 Vendor Advisory
- https://access.redhat.com/downloads/content/package-browser/ URL
- https://git.libssh.org/projects/libssh.git/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5351.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-5351 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-415Double Free
Timeline
Published4 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta