CVE-2025-5351
Medium
Description
A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Libssh
PublishedJul 4, 2025
First seenJul 4, 2025
Weakness typeCWE-415CWE-415
How to fix
Update
- libssh libssh0.11.2 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libssh libssh | 0.10.0 ≤ v < 0.11.2 | 0.11.2 |
| redhat openshift_container_platform | 4.0 | — |
| redhat enterprise_linux | 6.0, 7.0, 8.0, 9.0, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.