{"id":"CVE-2025-8277","aliases":["ALSA-2026:18683","AZL-67092","AZL-67095","BELL-CVE-2025-8277","CLSA-2026-1779467653","CLSA-2026-1779888685","DEBIAN-CVE-2025-8277","DLA-4385-1","EUVD-2025-27246","GHSA-39mw-228p-wr6v","OESA-2025-2342","RHSA-2026:18683","RLSA-2026:18683","SUSE-SU-2025:03368-1","SUSE-SU-2025:03369-1","SUSE-SU-2025:20847-1","SUSE-SU-2025:20894-1","SUSE-SU-2025:3787-1","SUSE-SU-2025:3788-1","SUSE-SU-2025:3897-1","SUSE-SU-2026:21396-1","SUSE-SU-2026:21428-1","UBUNTU-CVE-2025-8277","USN-8051-1","USN-8051-2","openSUSE-SU-2025:15545-1","openSUSE-SU-2026:20647-1"],"status":"published","title":"Libssh: memory exhaustion via repeated key exchange in libssh","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00431,"percentile":0.37638,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2025-09-09T11:55:39Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libssh","fixed_in":["0.10.6-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libssh","fixed_in":["0.10.6-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libssh","fixed_in":["0.11.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libssh","fixed_in":["0.11.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libssh","fixed_in":["0.11.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libssh","fixed_in":["0.10.6-0+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libssh","fixed_in":["0.11.2-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libssh","fixed_in":["0.11.3-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libssh","fixed_in":["0.9.6-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libssh","fixed_in":["0.10.5-7.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libssh","fixed_in":["0.10.5-7.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"libssh","fixed_in":["0.10.5-7.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libssh","fixed_in":["0.9.4-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libssh","fixed_in":["0.9.6-13.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libssh","fixed_in":["0.6.3-12.18.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libssh","fixed_in":["0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libssh","fixed_in":["0.9.3-2ubuntu2.5+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libssh","fixed_in":["0.9.6-2ubuntu0.22.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libssh","fixed_in":["0.10.6-2ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"libssh","fixed_in":["0.11.2-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh","fixed_in":["0.6.3-4.3ubuntu0.6+esm4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libssh-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libssh-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:2","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.4-r0"},{"fixed":"0.11.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.11.1-r0"},{"fixed":"0.11.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.9.6-r1"},{"fixed":"0.11.3-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-15.el9_6.tuxcare.els8"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libssh-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-15.el9_6.tuxcare.els8"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libssh-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-15.el9_6.tuxcare.els8"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-8.el9_2.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libssh-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-8.el9_2.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libssh-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-8.el9_2.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-0+deb12u2"}]}],"versions":["0.10.5-2","0.10.5-3","0.10.5-3+hurd.1","0.10.6-0+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.2-1+deb13u1"}]}],"versions":["0.11.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-1"}]}],"versions":["0.11.2-1"]},{"source":"osv","ecosystem":"Debian:11","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-0+deb11u2"}]}],"versions":["0.9.5-1","0.9.5-1+deb11u1","0.9.6-1","0.9.6-2","0.9.7-0+deb11u1","0.9.8-0+deb11u1"],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-7.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-7.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-7.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.4-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-13.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libssh-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libssh-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-18.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-3.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150600.11.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150600.11.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150600.11.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-slfo.1.1_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150200.13.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150200.13.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150400.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150400.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-150400.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-12.18.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6"}]}],"versions":["0.7.5-1","0.8.0~20170825.94fa1e38-1","0.8.0~20170825.94fa1e38-1build1","0.8.0~20170825.94fa1e38-1ubuntu0.1","0.8.0~20170825.94fa1e38-1ubuntu0.2","0.8.0~20170825.94fa1e38-1ubuntu0.5","0.8.0~20170825.94fa1e38-1ubuntu0.6","0.8.0~20170825.94fa1e38-1ubuntu0.7","0.8.0~20170825.94fa1e38-1ubuntu0.7+esm3","0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4","0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-2ubuntu2.5+esm3"}]}],"versions":["0.9.0-1ubuntu1","0.9.0-1ubuntu4","0.9.0-1ubuntu5","0.9.3-2ubuntu1","0.9.3-2ubuntu2","0.9.3-2ubuntu2.1","0.9.3-2ubuntu2.2","0.9.3-2ubuntu2.3","0.9.3-2ubuntu2.4","0.9.3-2ubuntu2.5","0.9.3-2ubuntu2.5+esm1","0.9.3-2ubuntu2.5+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-2ubuntu0.22.04.6"}]}],"versions":["0.9.6-1","0.9.6-1build1","0.9.6-2","0.9.6-2build1","0.9.6-2ubuntu0.22.04.1","0.9.6-2ubuntu0.22.04.2","0.9.6-2ubuntu0.22.04.3","0.9.6-2ubuntu0.22.04.4","0.9.6-2ubuntu0.22.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-2ubuntu0.3"}]}],"versions":["0.10.5-3ubuntu1","0.10.5-3ubuntu2","0.10.6-2","0.10.6-2build1","0.10.6-2build2","0.10.6-2ubuntu0.1","0.10.6-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.2-1ubuntu0.2"}]}],"versions":["0.11.1-1","0.11.1-2","0.11.2-1","0.11.2-1build1","0.11.2-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-2ubuntu0.22.04.6"}]}],"versions":["0.9.6-1","0.9.6-1build1","0.9.6-2","0.9.6-2build1","0.9.6-2ubuntu0.22.04.1","0.9.6-2ubuntu0.22.04.2","0.9.6-2ubuntu0.22.04.3","0.9.6-2ubuntu0.22.04.4","0.9.6-2ubuntu0.22.04.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.6-2ubuntu0.3"}]}],"versions":["0.10.5-3ubuntu1","0.10.5-3ubuntu2","0.10.6-2","0.10.6-2build1","0.10.6-2build2","0.10.6-2ubuntu0.1","0.10.6-2ubuntu0.2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.2-1ubuntu0.2"}]}],"versions":["0.11.1-1","0.11.1-2","0.11.2-1","0.11.2-1build1","0.11.2-1ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-4.3ubuntu0.6+esm4"}]}],"versions":["0.6.3-3ubuntu3","0.6.3-4.1","0.6.3-4.2","0.6.3-4.2ubuntu1","0.6.3-4.3","0.6.3-4.3ubuntu0.1","0.6.3-4.3ubuntu0.2","0.6.3-4.3ubuntu0.5","0.6.3-4.3ubuntu0.6","0.6.3-4.3ubuntu0.6+esm1","0.6.3-4.3ubuntu0.6+esm2","0.6.3-4.3ubuntu0.6+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6"}]}],"versions":["0.7.5-1","0.8.0~20170825.94fa1e38-1","0.8.0~20170825.94fa1e38-1build1","0.8.0~20170825.94fa1e38-1ubuntu0.1","0.8.0~20170825.94fa1e38-1ubuntu0.2","0.8.0~20170825.94fa1e38-1ubuntu0.5","0.8.0~20170825.94fa1e38-1ubuntu0.6","0.8.0~20170825.94fa1e38-1ubuntu0.7","0.8.0~20170825.94fa1e38-1ubuntu0.7+esm3","0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4","0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-2ubuntu2.5+esm3"}]}],"versions":["0.9.0-1ubuntu1","0.9.0-1ubuntu4","0.9.0-1ubuntu5","0.9.3-2ubuntu1","0.9.3-2ubuntu2","0.9.3-2ubuntu2.1","0.9.3-2ubuntu2.2","0.9.3-2ubuntu2.3","0.9.3-2ubuntu2.4","0.9.3-2ubuntu2.5","0.9.3-2ubuntu2.5+esm1","0.9.3-2ubuntu2.5+esm2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-1.1"}]}],"bundled":2}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:18683","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-8277","tags":["vdb-entry","x_refsource_REDHAT","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2383888","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://www.libssh.org/security/advisories/CVE-2025-8277.txt","tags":["article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8277","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-39mw-228p-wr6v"},{"url":"https://access.redhat.com/security/cve/CVE-2025-4877","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4878","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5351","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-8114","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0964","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0965","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0966","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0967","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0968","tags":["report"]},{"url":"https://bugzilla.redhat.com/2369367","tags":["report"]},{"url":"https://bugzilla.redhat.com/2376184","tags":["report"]},{"url":"https://bugzilla.redhat.com/2376193","tags":["report"]},{"url":"https://bugzilla.redhat.com/2383220","tags":["report"]},{"url":"https://bugzilla.redhat.com/2383888","tags":["report"]},{"url":"https://bugzilla.redhat.com/2433121","tags":["report"]},{"url":"https://bugzilla.redhat.com/2436979","tags":["report"]},{"url":"https://bugzilla.redhat.com/2436980","tags":["report"]},{"url":"https://bugzilla.redhat.com/2436981","tags":["report"]},{"url":"https://bugzilla.redhat.com/2436982","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-18683.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-8277","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779467653.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779888685.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-8277","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2342","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2383220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436982","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-150661","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18683.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4877","tags":["advisory"]},{"url":"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11\u0026id=6fd9cc8ce3958092a1aae11f1f2e911b2747732d","tags":["article"]},{"url":"https://www.libssh.org/security/advisories/CVE-2025-4877.txt","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4878","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4878","tags":["advisory"]},{"url":"https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1","tags":["article"]},{"url":"https://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb","tags":["article"]},{"url":"https://www.libssh.org/security/advisories/CVE-2025-4878.txt","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5351","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5351","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-8114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8114","tags":["advisory"]},{"url":"https://git.libssh.org/projects/libssh.git/commit/?id=53ac23ded4cb2c5463f6c4cd1525331bd578812d","tags":["article"]},{"url":"https://git.libssh.org/projects/libssh.git/commit/?id=65f363c9","tags":["article"]},{"url":"https://www.libssh.org/security/advisories/CVE-2025-8114.txt","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-8277","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0964","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0964","tags":["advisory"]},{"url":"https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0965","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0966","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0967","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0968","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:18683","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503368-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1246974","tags":["report"]},{"url":"https://bugzilla.suse.com/1249375","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8277","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503369-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520847-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520894-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253787-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253788-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253897-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621396-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258045","tags":["report"]},{"url":"https://bugzilla.suse.com/1258049","tags":["report"]},{"url":"https://bugzilla.suse.com/1258054","tags":["report"]},{"url":"https://bugzilla.suse.com/1258080","tags":["report"]},{"url":"https://bugzilla.suse.com/1258081","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0968","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621428-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-8277","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8051-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8051-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-0964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-0968","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-8277","title":"Libssh: memory exhaustion via repeated key exchange in libssh","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T11:55:39.036Z","modified":"2026-11-06T17:46:44.785Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-401"],"updated_at":"2026-11-06T18:59:07.714367Z"}],"euvd":[{"id":"EUVD-2025-27246","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T11:55:39Z","modified":"2026-11-06T17:46:44Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T19:05:53.354277Z"}],"ghsa":[{"id":"GHSA-39mw-228p-wr6v","title":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly...","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:30:49Z","modified":"2026-05-19T15:31:20Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:08:12.004262Z"}],"nvd":[{"id":"CVE-2025-8277","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:15:30.677Z","modified":"2026-11-06T18:17:28.67Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-401"],"updated_at":"2026-11-06T20:01:10.091781Z"}],"osv":[{"id":"BELL-CVE-2025-8277","status":"published","published":"2025-09-10T06:04:42.590184Z","modified":"2026-01-26T09:41:04.300052Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"DEBIAN-CVE-2025-8277","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:15:30.677Z","modified":"2026-11-07T09:47:28.968051296Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2025-2342","title":"libssh security update","description":"The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libssh\u0026apos;s handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.(CVE-2025-8277)","status":"published","published":"2025-09-26T11:09:25Z","modified":"2026-08-18T01:19:11.951460095Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2026:18683","title":"Red Hat Security Advisory: libssh security update","status":"published","published":"2026-05-20T10:09:25Z","modified":"2026-10-17T10:10:05Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2026:18683","title":"Moderate: libssh security update","description":"libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nSecurity Fix(es):\n\n* libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351)\n\n* libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878)\n\n* libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877)\n\n* libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114)\n\n* libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277)\n\n* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)\n\n* libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)\n\n* libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)\n\n* libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)\n\n* libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:22.703988412Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-8277","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:15:00Z","modified":"2026-04-22T16:16:42.605948Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"ALSA-2026:18683","title":"Moderate: libssh security update","description":"libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.  \n\nSecurity Fix(es):  \n\n  * libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351)\n  * libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878)\n  * libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877)\n  * libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114)\n  * libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277)\n  * libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)\n  * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)\n  * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)\n  * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)\n  * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:31.079999242Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-67092","title":"CVE-2025-8277 affecting package libssh for versions less than 0.10.6-5","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:15:30Z","modified":"2026-04-21T04:38:04.363089Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-67095","title":"CVE-2025-8277 affecting package libssh for versions less than 0.10.6-4","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:15:30Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"CLSA-2026-1779467653","title":"libssh: Fix of 4 CVEs","description":"- CVE-2025-4877: prevent base64 integer overflow and potential OOB write\n- CVE-2025-4878: initialize stack pointers to mitigate use of uninitialized\n  values in legacy privatekey_from_file() path\n- CVE-2025-8277: fix DH-GEX packet filter and free unused ephemeral / ECDH\n  keys to prevent memory exhaustion\n- CVE-2026-0965: skip non-regular and oversized configuration / known_hosts\n  files to avoid local DoS","status":"published","published":"2026-05-22T16:34:17Z","modified":"2026-06-01T00:32:54.653217115Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779888685","title":"libssh: Fix of 3 CVEs","description":"- CVE-2025-4877: prevent integer overflow and potential out-of-bounds\n  write in base64 decoder by capping input length to 256MB\n- CVE-2025-8277: adjust packet filter to work correctly when DH-GEX is\n  guessed wrongly\n- CVE-2026-0965: refuse non-regular and over-sized configuration files\n  in libssh config and known_hosts readers","status":"published","published":"2026-05-27T13:31:45Z","modified":"2026-10-26T09:30:03.926899075Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CVE-2025-8277","description":"A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.","status":"published","published":"2025-09-09T12:15:30Z","modified":"2026-05-26T16:14:28.084049175Z","updated_at":"2026-11-02T15:44:53.185592Z"},{"id":"DLA-4385-1","title":"libssh - security update","status":"published","published":"2025-11-27T00:00:00Z","modified":"2025-11-27T10:18:25.20627Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2025:15545-1","title":"libssh-config-0.11.3-1.1 on GA media","description":"These are all security issues fixed in the libssh-config-0.11.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-11T00:00:00Z","modified":"2026-03-23T04:53:55.545522Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20647-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- Update to version 0.11.4:\n- CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)\n- CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045)\n- CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)\n- CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)\n- CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)\n- CVE-2025-8114: Fix NULL pointer dereference after allocation failure (bsc#1246974)\n- CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX (bsc#1249375)\n","status":"published","published":"2026-04-29T11:20:23Z","modified":"2026-05-01T18:26:43.153774Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:03368-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is\n  repeated with incorrect guesses (bsc#1249375).\n- CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID\n  (bsc#1246974).\n","status":"published","published":"2025-09-26T10:53:33Z","modified":"2025-09-26T19:33:48.138495Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03369-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is\n  repeated with incorrect guesses (bsc#1249375).\n- CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID\n  (bsc#1246974).\n","status":"published","published":"2025-09-26T10:54:45Z","modified":"2026-02-04T04:10:25.224296Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20847-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID\n  during the key exchange (KEX) process (bsc#1246974)\n- CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange (bsc#1249375)\n","status":"published","published":"2025-10-14T15:20:28Z","modified":"2026-03-23T04:49:07.46965Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20894-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID \n  during the key exchange (KEX) process (bsc#1246974)\n- CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange (bsc#1249375)\n","status":"published","published":"2025-10-20T16:31:28Z","modified":"2026-03-23T04:51:04.764911Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:3787-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is\n  repeated with incorrect guesses (bsc#1249375).\n- CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID\n  (bsc#1246974).\n","status":"published","published":"2025-10-24T13:28:40Z","modified":"2026-02-04T03:31:34.039447Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3788-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is\n  repeated with incorrect guesses (bsc#1249375).\n- CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID\n  (bsc#1246974).\n","status":"published","published":"2025-10-24T13:28:58Z","modified":"2026-02-04T03:37:26.296772Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3897-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is\n  repeated with incorrect guesses (bsc#1249375).\n","status":"published","published":"2025-10-31T14:55:41Z","modified":"2026-02-04T02:50:15.197007Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:21396-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- Update to version 0.11.4:\n- CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)\n- CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045)\n- CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)\n- CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)\n- CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)\n- CVE-2025-8114: Fix NULL pointer dereference after allocation failure (bsc#1246974)\n- CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX (bsc#1249375)\n","status":"published","published":"2026-04-30T09:40:57Z","modified":"2026-05-01T18:44:39.826614Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21428-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- Update to version 0.11.4:\n- CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)\n- CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045)\n- CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)\n- CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)\n- CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)\n- CVE-2025-8114: Fix NULL pointer dereference after allocation failure (bsc#1246974)\n- CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX (bsc#1249375)\n","status":"published","published":"2026-04-30T09:40:57Z","modified":"2026-05-05T18:23:49.955267Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"USN-8051-1","title":"libssh vulnerabilities","description":"It was discovered that libssh clients incorrectly handled the key exchange\nprocess. A remote attacker could possibly use this issue to cause libssh\nclients to crash, resulting in a denial of service. (CVE-2025-8277)\n\nIt was discovered that the libssh SCP client incorrectly sanitized paths\nreceived from servers. A remote attacker could use this issue to cause\nlibssh SCP clients to overwrite files outside of the working directory and\npossibly execute arbitrary code. (CVE-2026-0964)\n\nIt was discovered that libssh incorrectly handled parsing configuration\nfiles. A local attacker could possibly use this issue to cause libssh to\naccess non-regular files, resulting in a denial of service. (CVE-2026-0965)\n\nIt was discovered that libssh incorrectly handled the ssh_get_hexa()\nfunction. A remote attacker could possibly use this issue to cause libssh\nto crash, resulting in a denial of service. (CVE-2026-0966)\n\nIt was discovered that libssh incorrectly handled certain regular\nexpressions. A local attacker could possibly use this issue to cause libssh\nto consume resources, resulting in a denial of service. (CVE-2026-0967)\n\nIt was discovered that the libssh SFTP client incorrectly handled certain\nmalformed longname fields. A remote attacker could use this issue to cause\nlibssh SFTP clients to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2026-0968)","status":"published","published":"2026-02-18T13:14:15Z","modified":"2026-05-14T12:34:32.035093Z","updated_at":"2026-11-02T16:58:22.951676Z"},{"id":"USN-8051-2","title":"libssh vulnerabilities","description":"USN-8051-1 fixed vulnerabilities in libssh. This update provides the\ncorresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that libssh clients incorrectly handled the key exchange\n process. A remote attacker could possibly use this issue to cause libssh\n clients to crash, resulting in a denial of service. (CVE-2025-8277)\n\n It was discovered that the libssh SCP client incorrectly sanitized paths\n received from servers. A remote attacker could use this issue to cause\n libssh SCP clients to overwrite files outside of the working directory and\n possibly execute arbitrary code. (CVE-2026-0964)\n\n It was discovered that libssh incorrectly handled parsing configuration\n files. A local attacker could possibly use this issue to cause libssh to\n access non-regular files, resulting in a denial of service. (CVE-2026-0965)\n\n It was discovered that libssh incorrectly handled the ssh_get_hexa()\n function. A remote attacker could possibly use this issue to cause libssh\n to crash, resulting in a denial of service. (CVE-2026-0966)\n\n It was discovered that libssh incorrectly handled certain regular\n expressions. A local attacker could possibly use this issue to cause\n libssh to consume resources, resulting in a denial of service.\n (CVE-2026-0967)\n\n It was discovered that the libssh SFTP client incorrectly handled certain\n malformed longname fields. A remote attacker could use this issue to cause\n libssh SFTP clients to crash, resulting in a denial of service, or\n possibly execute arbitrary code. (CVE-2026-0968)","status":"published","published":"2026-02-23T19:56:30Z","modified":"2026-06-25T13:32:31.74535511Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}