Description

A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.

INFO

Published Date :

2025-07-04T08:16:47.122Z

Last Modified :

2026-01-08T03:07:10.340Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2025-5351 vulnerability.

Vendors Products
Libssh
  • Libssh
Redhat
  • Enterprise Linux
  • Openshift
  • Openshift Container Platform

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact