Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x94w-cg8g-g593

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

EPSS

Процентиль: 35%
0.0042
Низкий

3.7 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.7
ubuntu
13 дней назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVSS3: 3.7
redhat
13 дней назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVSS3: 3.7
nvd
13 дней назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVSS3: 3.7
debian
13 дней назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a ...

EPSS

Процентиль: 35%
0.0042
Низкий

3.7 Low

CVSS3

Дефекты

CWE-125