Description
A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
libssh
Default version status: unaffected
0 to < 0.11.2affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:0.10.4-18.el9 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:0.10.4-18.el9 to < *unaffected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 6
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
References
- https://access.redhat.com/errata/RHSA-2026:18683 ↗
- https://access.redhat.com/security/cve/CVE-2025-4878 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2376184 ↗
- https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1 ↗
- https://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb ↗
- https://www.libssh.org/security/advisories/CVE-2025-4878.txt ↗