Логотип exploitDog
bind: "CVE-2025-4877"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-4877"

Количество 13

Количество 13

ubuntu логотип

CVE-2025-4877

3 месяца назад

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
EPSS: Низкий
redhat логотип

CVE-2025-4877

5 месяцев назад

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
EPSS: Низкий
nvd логотип

CVE-2025-4877

3 месяца назад

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
EPSS: Низкий
msrc логотип

CVE-2025-4877

3 месяца назад

Libssh: write beyond bounds in binary to base64 conversion functions

EPSS: Низкий
debian логотип

CVE-2025-4877

3 месяца назад

There's a vulnerability in the libssh package where when a libssh cons ...

CVSS3: 4.5
EPSS: Низкий
github логотип

GHSA-pwrf-jm93-99r3

3 месяца назад

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
EPSS: Низкий
fstec логотип

BDU:2025-07641

8 месяцев назад

Уязвимость функции ssh_get_fingerprint_hash() библиотеки libssh, позволяющая нарушителю выполнить произвольный код

CVSS3: 4.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02755-1

4 месяца назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02281-1

5 месяцев назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02279-1

5 месяцев назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02278-1

5 месяцев назад

Security update for libssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02229-1

5 месяцев назад

Security update for libssh

EPSS: Низкий
redos логотип

ROS-20250924-09

2 месяца назад

Множественные уязвимости libssh

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-4877

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
0%
Низкий
3 месяца назад
redhat логотип
CVE-2025-4877

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
0%
Низкий
5 месяцев назад
nvd логотип
CVE-2025-4877

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
0%
Низкий
3 месяца назад
msrc логотип
CVE-2025-4877

Libssh: write beyond bounds in binary to base64 conversion functions

0%
Низкий
3 месяца назад
debian логотип
CVE-2025-4877

There's a vulnerability in the libssh package where when a libssh cons ...

CVSS3: 4.5
0%
Низкий
3 месяца назад
github логотип
GHSA-pwrf-jm93-99r3

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.

CVSS3: 4.5
0%
Низкий
3 месяца назад
fstec логотип
BDU:2025-07641

Уязвимость функции ssh_get_fingerprint_hash() библиотеки libssh, позволяющая нарушителю выполнить произвольный код

CVSS3: 4.5
0%
Низкий
8 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:02755-1

Security update for libssh

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02281-1

Security update for libssh

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:02279-1

Security update for libssh

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:02278-1

Security update for libssh

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:02229-1

Security update for libssh

5 месяцев назад
redos логотип
ROS-20250924-09

Множественные уязвимости libssh

CVSS3: 6.5
2 месяца назад

Уязвимостей на страницу