https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:36:26 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:18231 <p><strong>Affected:</strong> AlmaLinux:10: libssh-config</p> <p>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.</p> <p>Security Fix(es):</p> <p>* libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libssh-config</p> <p>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.</p> <p>Security Fix(es):</p> <p>* libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:18231 https://cve.radiocsirt.org/vuln/bdu:2025-09008 bdu:2025-09008 https://cve.radiocsirt.org/vuln/bdu:2025-09008 https://cve.radiocsirt.org/vuln/bell-cve-2025-5318 <p><strong>Affected:</strong> Alpaquita:23: libssh, Alpaquita:25: libssh, Alpaquita:stream: libssh</p> <p><strong>Affected:</strong> Alpaquita:23: libssh, Alpaquita:25: libssh, Alpaquita:stream: libssh</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-5318 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-365061 EUVD-2026-365061 https://cve.radiocsirt.org/vuln/euvd-2026-365061 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5318 <p>A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.</p> <p>A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5318 https://cve.radiocsirt.org/vuln/ghsa-98qw-prqm-9f4p <p>A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.</p> <p>A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-98qw-prqm-9f4p https://cve.radiocsirt.org/vuln/msrc_cve-2025-5318 msrc_CVE-2025-5318 https://cve.radiocsirt.org/vuln/msrc_cve-2025-5318 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 NCSC-2026-0022 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 https://cve.radiocsirt.org/vuln/oesa-2025-1707 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libssh</p> <p>The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es):</p> <p>A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.(CVE-2025-5318)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libssh</p> <p>The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es):</p> <p>A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.(CVE-2025-5318)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1707 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15243-1 <p>libssh-config-0.11.2-1.1 on GA media</p> <p>libssh-config-0.11.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15243-1 https://cve.radiocsirt.org/vuln/rhsa-2025:19012 <p>libssh: out-of-bounds read in sftp_handle()</p> <p>libssh: out-of-bounds read in sftp_handle()</p> https://cve.radiocsirt.org/vuln/rhsa-2025:19012 https://cve.radiocsirt.org/vuln/suse-su-2025:02279-1 <p>Security update for libssh</p> <p>Security update for libssh</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02279-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5318 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:Pro:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh, Ubuntu:24.04:LTS: libssh</p> <p>A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:Pro:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh, Ubuntu:24.04:LTS: libssh</p> <p>A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5318 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1385 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libssh ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libssh ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1385