Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-4878

Опубликовано: 22 июл. 2025
Источник: nvd
CVSS3: 3.6
EPSS Низкий

Описание

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

EPSS

Процентиль: 1%
0.00011
Низкий

3.6 Low

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.6
ubuntu
4 месяца назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
redhat
5 месяцев назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

CVSS3: 3.6
msrc
3 месяца назад

Libssh: use of uninitialized variable in privatekey_from_file()

CVSS3: 3.6
debian
4 месяца назад

A vulnerability was found in libssh, where an uninitialized variable e ...

CVSS3: 3.6
github
4 месяца назад

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

EPSS

Процентиль: 1%
0.00011
Низкий

3.6 Low

CVSS3

Дефекты

CWE-416