CVE-2025-5449CWE-190

CVE-2025-5449

Medium · published July 25, 2025

CVSS v3.1
6.5
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00956 · 61.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-07-25T22:15Z
Affected products (2)
ProductVersionsFixed in
libssh/libsshall versions—
libssh/libsshall versions—
References (8)
https://access.redhat.com/security/cve/CVE-2025-5449 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2369705 · [email protected]https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=261612179f740bc62ba363d98b3bd5e5573a811f · [email protected]https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=3443aec90188d6aab9282afc80a81df5ab72c4da · [email protected]https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=5504ff40515439a5fecbb17da7483000c4d12eb7 · [email protected]https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=78485f446af9b30e37eb8f177b81940710d54496 · [email protected]https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=f79ec51b7fd519dbc5737a7ba826e3ed093f6ceb · [email protected]https://www.libssh.org/security/advisories/CVE-2025-5449.txt · [email protected]
EPSS history
Timeline
  • 25 JUL 17:19Z
    Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service
    cvelistv5