Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-4878

Опубликовано: 22 июл. 2025
Источник: nvd
CVSS3: 3.6
EPSS Низкий

Описание

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

EPSS

Процентиль: 1%
0.00013
Низкий

3.6 Low

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.6
ubuntu
26 дней назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
redhat
около 2 месяцев назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
debian
26 дней назад

A vulnerability was found in libssh, where an uninitialized variable e ...

CVSS3: 3.6
github
26 дней назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
fstec
4 месяца назад

Уязвимость функции privatekey_from_file() библиотеки libssh, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании

EPSS

Процентиль: 1%
0.00013
Низкий

3.6 Low

CVSS3

Дефекты

CWE-416