Description

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

INFO

Published Date :

2025-06-24T14:10:07.188Z

Last Modified :

2026-03-18T20:41:54.510Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2025-5318 vulnerability.

Vendors Products
Libssh
  • Libssh
Redhat
  • Ai Inference Server
  • Enterprise Linux
  • Openshift
  • Openshift Container Platform
  • Openshift Distributed Tracing
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Eus Long Life
  • Rhel Tus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-5318.

URL Resource
https://access.redhat.com/errata/RHSA-2025:18231 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:18275 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:18286 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19012 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19098 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19101 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19295 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19300 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19313 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19400 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19401 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19470 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19472 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19807 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:19864 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:20943 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:21013 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:21329 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:21829 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:22275 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:23078 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:23079 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:23080 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:0326 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:1541 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:3461 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:3462 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2025-5318 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2369131 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-5318 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-5318 cve-icon
https://www.libssh.org/security/advisories/CVE-2025-5318.txt cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact