libssh
CVE-2025-5449
MEDIUM
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
Alpine Linux: libssh fixed in 0.11.2-r0
AnalysisAI
libssh in Alpine Linux was patched at package version 0.11.2-r0, addressing an unspecified vulnerability tracked as CVE-2025-5449. The nature of the vulnerability - its root cause, attack vector, and impact - is not disclosed in available intelligence sources. The EPSS score of 0.52% (67th percentile) indicates moderate relative ranking among CVEs but low absolute exploitation probability. No active exploitation has been confirmed, and no public exploit code has been identified at time of analysis.
Technical ContextAI
libssh is an open-source C library implementing the SSH protocol, widely used in Linux distributions including Alpine Linux for secure shell communications, SFTP, and SCP functionality. Alpine Linux packages libssh and the fix was delivered as package revision 0.11.2-r0 in the Alpine repository. No CWE classification is available in current intelligence, making it impossible to confirm the root cause class - whether this involves memory corruption, authentication bypass, cryptographic weakness, or another vulnerability class. Without CPE strings or CVSS vector data, the specific upstream libssh version corresponding to Alpine's 0.11.2-r0 packaging cannot be independently confirmed from this dataset.
RemediationAI
The primary remediation is to upgrade the libssh package on Alpine Linux to version 0.11.2-r0 or later using the standard Alpine package manager (apk upgrade libssh). This is the vendor-confirmed fix per the Alpine Linux security advisory. No workarounds or compensating controls are documented in available intelligence, and because the vulnerability's nature is undisclosed, no targeted mitigations can be responsibly recommended. If immediate patching is not feasible, consider restricting access to services that depend on libssh until the package can be updated. No advisory URL was present in the provided reference data - consult the Alpine Linux security tracker directly for the official advisory.
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. Rated critical severity
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. Rated medium severity (CVSS
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or
Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly
Cryptographic key derivation failure in libssh versions prior to 0.11.2 (when built against OpenSSL older than 3.0) can
A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. Rated high severi
CVE-2025-5318 is an out-of-bounds read vulnerability in libssh versions before 0.11.2 caused by an incorrect comparison
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.
The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not proper
Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a
Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in cha
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today