Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x94w-cg8g-g593

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

EPSS

Процентиль: 43%
0.00493
Низкий

3.7 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVSS3: 3.7
redhat
4 месяца назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVSS3: 5.3
nvd
4 месяца назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVSS3: 5.3
debian
4 месяца назад

A flaw was found in libssh. During server-side GSSAPI key exchange, a ...

CVSS3: 5.3
redos
2 месяца назад

Уязвимость libssh

EPSS

Процентиль: 43%
0.00493
Низкий

3.7 Low

CVSS3

Дефекты

CWE-125