Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-5318

Libssh: out-of-bounds read in sftp_handle()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libssh

Default version status: unaffected

  • 0 to < 0.11.2affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:0.11.1-4.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:0.11.1-4.el10_1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:0.9.6-15.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:0.9.6-15.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support

Default version status: affected

  • 0:0.9.0-4.el8_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:0.9.4-2.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Default version status: affected

  • 0:0.9.4-2.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 0:0.9.6-4.el8_6.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Default version status: affected

  • 0:0.9.6-4.el8_6.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Default version status: affected

  • 0:0.9.6-4.el8_6.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 0:0.9.6-13.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 0:0.9.6-13.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:0.10.4-15.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:0.10.4-15.el9_7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:0.10.4-15.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:0.10.4-15.el9_7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Default version status: affected

  • 0:0.9.6-3.el9_0.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 0:0.10.4-9.el9_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 0:0.10.4-13.el9_4.1 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.12

Default version status: affected

  • 412.86.202511191939-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.13

Default version status: affected

  • 413.92.202511261311-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.14

Default version status: affected

  • 414.92.202511122212-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.15

Default version status: affected

  • 415.92.202601271320-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.16

Default version status: affected

  • 416.94.202601071926-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.17

Default version status: affected

  • 417.94.202510282022-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 418.94.202511041748-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 4.19.9.6.202510281054-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.20

Default version status: affected

  • 4.20.9.6.202510290321-0 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1765379088 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1765379049 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 3.2.2-1764871796 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1772160593 to < *unaffected

Red Hat Red Hat AI Inference Server 3.2

Default version status: affected

  • 1772160625 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.7.0

Default version status: affected

  • rhosdt-3.7-1762254546 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.7.0

Default version status: affected

  • rhosdt-3.7-1762254552 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.7.0

Default version status: affected

  • rhosdt-3.7-1762255881 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.7.0

Default version status: affected

  • rhosdt-3.7-1762254530 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.7.0

Default version status: affected

  • rhosdt-3.7-1762254519 to < *unaffected

Red Hat Red Hat OpenShift distributed tracing 3.7.0

Default version status: affected

  • rhosdt-3.7-1762254545 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References