A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2025-8114 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2383220 | Issue Tracking Third Party Advisory |
Configurations
History
14 Aug 2025, 00:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* | |
| First Time |
Libssh libssh
Libssh |
|
| References | () https://access.redhat.com/security/cve/CVE-2025-8114 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2383220 - Issue Tracking, Third Party Advisory |
24 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-24 15:15
Updated : 2025-08-14 00:45
NVD link : CVE-2025-8114
Mitre link : CVE-2025-8114
JSON object : View
Products Affected
libssh
- libssh
CWE
CWE-476
NULL Pointer Dereference