CVE-2025-5449

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5449
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2025-5449 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369705 Issue Tracking Third Party Advisory
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=261612179f740bc62ba363d98b3bd5e5573a811f Patch
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=3443aec90188d6aab9282afc80a81df5ab72c4da Patch
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=5504ff40515439a5fecbb17da7483000c4d12eb7 Patch
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=78485f446af9b30e37eb8f177b81940710d54496 Patch
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=f79ec51b7fd519dbc5737a7ba826e3ed093f6ceb Patch
https://www.libssh.org/security/advisories/CVE-2025-5449.txt Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:libssh:libssh:0.11.0:*:*:*:*:*:*:*
cpe:2.3:a:libssh:libssh:0.11.1:*:*:*:*:*:*:*
History

14 Aug 2025, 00:39

Type Values Removed Values Added
CPE cpe:2.3:a:libssh:libssh:0.11.0:*:*:*:*:*:*:*
cpe:2.3:a:libssh:libssh:0.11.1:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : 6.5
First Time Libssh libssh
Libssh
References () https://www.libssh.org/security/advisories/CVE-2025-5449.txt - () https://www.libssh.org/security/advisories/CVE-2025-5449.txt - Third Party Advisory
References () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=261612179f740bc62ba363d98b3bd5e5573a811f - () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=261612179f740bc62ba363d98b3bd5e5573a811f - Patch
References () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=78485f446af9b30e37eb8f177b81940710d54496 - () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=78485f446af9b30e37eb8f177b81940710d54496 - Patch
References () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=3443aec90188d6aab9282afc80a81df5ab72c4da - () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=3443aec90188d6aab9282afc80a81df5ab72c4da - Patch
References () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=f79ec51b7fd519dbc5737a7ba826e3ed093f6ceb - () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=f79ec51b7fd519dbc5737a7ba826e3ed093f6ceb - Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=2369705 - () https://bugzilla.redhat.com/show_bug.cgi?id=2369705 - Issue Tracking, Third Party Advisory
References () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=5504ff40515439a5fecbb17da7483000c4d12eb7 - () https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=5504ff40515439a5fecbb17da7483000c4d12eb7 - Patch
References () https://access.redhat.com/security/cve/CVE-2025-5449 - () https://access.redhat.com/security/cve/CVE-2025-5449 - Third Party Advisory

25 Jul 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 18:15

Updated : 2025-08-14 00:39

NVD link : CVE-2025-5449

Mitre link : CVE-2025-5449

JSON object : View

Products Affected

libssh

  • libssh
CWE
CWE-190

Integer Overflow or Wraparound