Логотип exploitDog
bind:"GHSA-98qw-prqm-9f4p" OR bind:"CVE-2025-5318"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-98qw-prqm-9f4p" OR bind:"CVE-2025-5318"

Количество 13

Количество 13

github логотип

GHSA-98qw-prqm-9f4p

4 месяца назад

A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
EPSS: Низкий
ubuntu логотип

CVE-2025-5318

5 месяцев назад

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
EPSS: Низкий
redhat логотип

CVE-2025-5318

5 месяцев назад

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2025-5318

5 месяцев назад

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
EPSS: Низкий
msrc логотип

CVE-2025-5318

4 месяца назад

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2025-5318

5 месяцев назад

A flaw was found in the libssh library in versions less than 0.11.2. A ...

CVSS3: 5.4
EPSS: Низкий
redos логотип

ROS-20250724-10

4 месяца назад

Уязвимость libssh

CVSS3: 5.4
EPSS: Низкий
fstec логотип

BDU:2025-09008

5 месяцев назад

Уязвимость функции sftp_handle() библиотеки LibSSH, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 5.4
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02755-1

3 месяца назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02281-1

4 месяца назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02279-1

4 месяца назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02278-1

4 месяца назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02229-1

4 месяца назад

Security update for libssh

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-98qw-prqm-9f4p

A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
0%
Низкий
4 месяца назад
ubuntu логотип
CVE-2025-5318

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
0%
Низкий
5 месяцев назад
redhat логотип
CVE-2025-5318

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
0%
Низкий
5 месяцев назад
nvd логотип
CVE-2025-5318

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

CVSS3: 5.4
0%
Низкий
5 месяцев назад
msrc логотип
CVSS3: 5.4
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-5318

A flaw was found in the libssh library in versions less than 0.11.2. A ...

CVSS3: 5.4
0%
Низкий
5 месяцев назад
redos логотип
ROS-20250724-10

Уязвимость libssh

CVSS3: 5.4
0%
Низкий
4 месяца назад
fstec логотип
BDU:2025-09008

Уязвимость функции sftp_handle() библиотеки LibSSH, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 5.4
0%
Низкий
5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:02755-1

Security update for libssh

3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02281-1

Security update for libssh

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02279-1

Security update for libssh

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02278-1

Security update for libssh

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02229-1

Security update for libssh

4 месяца назад

Уязвимостей на страницу