Log in Start free

Vulnerability · Published Jul 4, 2025 · Assigned by redhat

CVE-2025-5351Libssh: double free vulnerability in libssh key export functions

Medium 6.5

In plain English

A medium-severity double free in libssh from libssh. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.6%top 50.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9libssh0.10.4-18.el9ALSA-2026:18683
AlmaLinux:9libssh-config0.10.4-18.el9ALSA-2026:18683
AlmaLinux:9libssh-devel0.10.4-18.el9ALSA-2026:18683
Alpine:v3.22libssh0.11.2-r0ALPINE-CVE-2025-5351
Alpine:v3.23libssh0.11.2-r0ALPINE-CVE-2025-5351
Alpine:v3.24libssh0.11.2-r0ALPINE-CVE-2025-5351
Debian:12libssh0.10.6-0+deb12u2DEBIAN-CVE-2025-5351
Debian:13libssh0.11.2-1DEBIAN-CVE-2025-5351
Debian:14libssh0.11.2-1DEBIAN-CVE-2025-5351
Rocky Linux:9libssh0:0.10.4-18.el9RLSA-2026:18683
Ubuntu:22.04:LTSlibssh0.9.6-2ubuntu0.22.04.4USN-7619-1
Ubuntu:24.04:LTSlibssh0.10.6-2ubuntu0.1USN-7619-1
Ubuntu:24.04:LTSlibssh0.10.6-2ubuntu0.1UBUNTU-CVE-2025-5351

Affected products (as reported)

VendorProductVersions
libssh libssh 0.10.0 – before 0.11.2
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-415 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References