Log in Start free

Vulnerability · Published Jul 25, 2025 · Assigned by redhat

CVE-2025-5449Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

Medium 6.5

In plain English

A medium-severity integer overflow in libssh. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.0%top 36.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.22libssh0.11.2-r0ALPINE-CVE-2025-5449
Alpine:v3.23libssh0.11.2-r0ALPINE-CVE-2025-5449
Alpine:v3.24libssh0.11.2-r0ALPINE-CVE-2025-5449
Debian:13libssh0.11.2-1DEBIAN-CVE-2025-5449
Debian:14libssh0.11.2-1DEBIAN-CVE-2025-5449
Ubuntu:22.04:LTSlibssh0.9.6-2ubuntu0.22.04.4USN-7619-1
Ubuntu:24.04:LTSlibssh0.10.6-2ubuntu0.1USN-7619-1

Affected products (as reported)

VendorProductVersions
libssh 0.11.0 – through 0.11.1
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References