Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-4878

Опубликовано: 22 июл. 2025
Источник: nvd
CVSS3: 3.6
EPSS Низкий

Описание

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

EPSS

Процентиль: 5%
0.0002
Низкий

3.6 Low

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.6
ubuntu
8 месяцев назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
redhat
9 месяцев назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
msrc
7 месяцев назад

Libssh: use of uninitialized variable in privatekey_from_file()

CVSS3: 3.6
debian
8 месяцев назад

A vulnerability was found in libssh, where an uninitialized variable e ...

CVSS3: 3.6
github
8 месяцев назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

EPSS

Процентиль: 5%
0.0002
Низкий

3.6 Low

CVSS3

Дефекты

CWE-416