Skip to main content

libssh EUVDEUVD-2025-19931

| CVE-2025-5372 HIGH
Incorrect Calculation (CWE-682)
2025-07-04 secalert@redhat.com
Information Disclosure OpenSSL Red Hat Enterprise Linux Libssh Openshift Container Platform
8.8
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Identify libssh server linked to OpenSSL <3.0
  2. Delivery
    Initiate SSH handshake
  3. Exploit
    Force ssh_kdf() KDF failure during key exchange
  4. Execution
    libssh returns success with uninitialized buffer
  5. Persist
    Session encrypts with predictable key material
  6. Impact
    Decrypt or inject into SSH channel

Vulnerability Assessment

Weakness
CWE
CWE-682
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Calculation correctness
Exploitation Conditions

Exploitation requires (1) the target endpoint to be running libssh prior to 0.11.2 specifically linked against OpenSSL older than 3.0 - installations on OpenSSL 3.0+ are not affected; (2) the SSH key exchange to reach the ssh_kdf() code path, i.e. a TCP-reachable libssh server or a libssh client induced to connect outward; and (3) the underlying OpenSSL KDF operation to actually fail during that handshake, which is not a default condition and typically demands resource exhaustion, FIPS-rejected algorithm selection, or other abnormal state. The published vector lists PR:L, but in practice the flaw is reached before SSH user authentication completes, so the limiting factor is causing the KDF failure rather than possessing credentials.
Impact

Signals diverge sharply: the NVD CVSS 3.1 score is 8.8 (network, low complexity, low privileges, high CIA) yet EPSS is 0.07% at the 21st percentile and the CVE is not on CISA KEV, with no public exploit identified at time of analysis. The realistic attacker workflow requires inducing OpenSSL's KDF to fail during the SSH handshake - an event that is rare in healthy systems (memory pressure, FIPS rejection, malformed algorithm negotiation) and not trivially attacker-controlled over the network, which conflicts with the AC:L rating in the published vector. The PR:L choice is also questionable because SSH key derivation occurs before any user authentication; conversely the impact is genuinely high when triggered, since both peers would proceed with predictable/zeroed key material. Net: prioritize as a routine patch across Red Hat/SUSE/Debian/Ubuntu fleets, but it is not an emergency comparable to confirmed actively exploited SSH issues.
Exploit ScenarioDerived

An attacker establishes an SSH connection to a libssh-based server (or lures a libssh-based client to connect to a malicious server) and engineers conditions that cause OpenSSL's KDF call to fail during key exchange - for example by negotiating unusual algorithms, exhausting memory, or interacting with FIPS-rejected primitives. libssh returns 'success' with uninitialized key buffers, so both peers continue with predictable or zeroed session keys, letting the attacker decrypt traffic, inject commands, or hijack the channel. No public PoC is currently known.
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv3 – Jun 15, 2026

Cryptographic key derivation failure in libssh versions prior to 0.11.2 (when built against OpenSSL older than 3.0) can cause SSH sessions to proceed with uninitialized key material, allowing remote attackers to undermine session confidentiality and integrity. The flaw stems from inverted return-value semantics between OpenSSL and libssh in ssh_kdf(), so a silent KDF failure is treated as success. No public exploit identified at time of analysis and EPSS risk is low (0.07%), but the issue is widely shipped across Red Hat, Ubuntu, Debian and SUSE distributions and has vendor patches available.

Earlier versions of this analysis (2)
v2 Jun 15, 2026 - 03:29 cvss changed CVSS 8.8

Cryptographic key derivation failure in libssh versions prior to 0.11.2 (when linked against OpenSSL releases older than 3.0) causes the ssh_kdf() function to misinterpret an OpenSSL failure return code (0) as success, leaving SSH session keys uninitialized. Remote attackers participating in an SSH handshake can leverage the resulting weak/zero key material to undermine session confidentiality, integrity, and availability. There is no public exploit identified at time of analysis and EPSS is very low (0.07%, 21st percentile), but Red Hat, Ubuntu, Debian, and SUSE have all shipped vendor patches.

v1 Mar 16, 2026 - 02:42 CVSS 5.0

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return valu

RemediationAI

Vendor-released patch: upgrade libssh to 0.11.2 or later upstream, or apply distribution backports such as Red Hat libssh 0.9.6-16.el8_10 (RHEL 8) and 0.9.6-3.el9_0.2 (RHEL 9 E4S/SAP) via RHSA-2025:21977 / RHSA-2025:23024, Ubuntu USN-7619-1, Debian DLA-4385-1, or the SUSE SUSE-SU-2025:02229/02278/02279/02281/20557/20596 updates. As a compensating control where patching is delayed, rebuild or relink libssh-consuming services against OpenSSL 3.0+ (which avoids the affected legacy KDF wrapper entirely), accepting the operational cost of validating that dependent applications work with the newer OpenSSL ABI. Restart all long-running services that link libssh (sshd replacements, libvirt, ansible runners, OpenShift components) after upgrading so the patched library is actually loaded, and consider temporarily restricting SSH exposure of libssh-based servers to trusted networks until updates are applied.

Affected VersionsENISA

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions patch: 0:0.9.6-3.el9_0.2
Red Hat Enterprise Linux 8 patch: 0:0.9.6-16.el8_10
libssh 0 <0.11.2

Affected Packages

euvd libssh fix: 0.11.2

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

libssh is a C library implementing the SSH2 protocol used by tooling such as KDE, GitHub, and Red Hat OpenShift. CWE-682 (Incorrect Calculation) applies here because ssh_kdf() - which derives symmetric encryption, MAC, and IV keys from the shared secret produced by SSH key exchange - calls into OpenSSL's KDF primitives. OpenSSL's convention is that 0 signals failure and non-zero signals success, while libssh's internal convention is the opposite, so when the underlying EVP_KDF operation fails, libssh interprets the 0 as 'success' and returns the uninitialized stack/heap buffer it had allocated for the derived key. The defect only manifests on builds linked to OpenSSL < 3.0 because the affected code path is the legacy KDF wrapper; later OpenSSL APIs are not reached.

Know when Libssh gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI 8.1 HIGH

Reachable pre-auth over the network (PR:N), but reliably forcing OpenSSL's KDF to fail during handshake is non-trivial (AC:H); successful exploitation fully compromises the SSH session (C/I/A:H).

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Ubuntu MEDIUM
SUSE HIGH
Red Hat 5.0 MEDIUM

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
Analysis Updated
Jun 15, 2026 - 03:29 vuln.today
v3 - CVSS changed
Analysis Updated
Jun 15, 2026 - 03:29 vuln.today
v2 - CVSS changed
Severity Changed
Jun 15, 2026 - 03:22 NVD
MEDIUM HIGH
CVSS changed
Jun 15, 2026 - 03:22 NVD
5.0 (MEDIUM) 8.8 (HIGH)
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Jul 04, 2025 - 06:15 nvd
MEDIUM 5.0

DescriptionNVD

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity, and availability.

Executive ViewAI

Why It Matters

A vulnerability in libssh (CVE-2025-5372, CVSS 8.8) can compromise SSH session encryption, potentially allowing attackers to intercept or modify secure communications. The flaw affects systems running libssh across Red Hat, Ubuntu, Debian, and SUSE distributions. While no public exploit has been identified at time of analysis, vendor patches are available and should be deployed promptly to protect SSH-dependent infrastructure.

Business Impact: High
Compensating Controls

Apply vendor patch. Interim mitigations pending patching: restrict SSH access to defined trusted networks and implement monitoring of SSH session establishment; systems built with OpenSSL 3.0 or later are not affected.

Threat Intelligence Overview

EPSS Score
0.1%
Top 79% exploitable
Data Quality
5 sources
Confidence: Medium
EUVD NVD CVE.org EPSS Vendor

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.1%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Open
Automatable· derived
No
Human Impact
High

Priority Score

44
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +44
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

More in Libssh

View all
CVE-2023-48795 MEDIUM POC
5.9 Dec 18

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
CVE-2018-10933 CRITICAL POC
9.1 Oct 17

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. Rated critical severity
CVE-2020-16135 MEDIUM POC
5.9 Jul 29

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. Rated medium severity (CVSS

CVE-2012-4562 HIGH
7.5 Nov 30

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or

CVE-2012-4560 HIGH
7.5 Nov 30

Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly
CVE-2019-14889 HIGH
8.8 Dec 10

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. Rated high severi
CVE-2025-5987 HIGH
8.1 Jul 07

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.
CVE-2015-3146 HIGH
7.5 Apr 13

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not proper
CVE-2012-6063 HIGH
7.5 Nov 30

Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a
CVE-2012-4559 MEDIUM
6.8 Nov 30

Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in cha
CVE-2026-15370 HIGH
7.3 Jul 21

Stack-based buffer overflow in libssh's SFTP server allows a connected client to crash the server or potentially execute
CVE-2016-0739 MEDIUM
5.9 Apr 13

libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-he

Same weakness CWE-682 – Incorrect Calculation

View all
CVE-2021-44847 CRITICAL POC
9.8
CVE-2022-23066 CRITICAL POC
9.1
CVE-2022-28048 HIGH POC
8.8
CVE-2020-0022 HIGH POC
8.8
CVE-2019-16346 HIGH POC
8.8
CVE-2023-42460 HIGH POC
7.5
CVE-2022-22138 HIGH POC
7.5
CVE-2022-30780 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

Ubuntu

Priority: Medium
libssh
Release Status Version
jammy released 0.9.6-2ubuntu0.22.04.4
noble released 0.10.6-2ubuntu0.1
oracular released 0.10.6-3ubuntu1.1
plucky released 0.11.1-1ubuntu0.1
upstream released 0.11.2
xenial ignored changes too intrusive
bionic ignored changes too intrusive
focal ignored changes too intrusive
USN-7619-1

Debian

Bug #1108407
libssh
Release Status Fixed Version Urgency
bullseye fixed 0.9.8-0+deb11u2 -
bullseye (security) fixed 0.9.8-0+deb11u2 -
bookworm fixed 0.10.6-0+deb12u2 -
bookworm (security) vulnerable 0.10.6-0+deb12u1 -
trixie fixed 0.11.2-1+deb13u1 -
forky fixed 0.11.3-1 -
sid fixed 0.12.0-1 -
(unstable) fixed 0.11.2-1 -
DLA-4385-1

SUSE

Severity: High
Product Status
Container bci/kiwi:9.24.43-16.18 Container containers/lmcache-lmstack-router:0.1.6-1.2 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/milvus:2.4.6-7.138 Container containers/open-webui-mcpo:0.0.17-1.1 Container containers/open-webui-pipelines:0.20250329.151219-5.11 Container containers/open-webui:0.6.9-10.25 Container containers/pytorch:2.7.0-nvidia-2.24 Container containers/vllm-openai:0.9.1-1.2 Container private-registry/harbor-db:2.13.2_git56172457-4.12 Container private-registry/harbor-trivy-adapter:1.1.0-1.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.1.7.26.2 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.5.1.7.28.2 Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:5.0.5.1.6.26.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.6.7.29.1 Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.0.7.32 Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:5.1.0.6.21 Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:5.1.1.1.8.10.2 Container suse/multi-linux-manager/5.1/x86_64/server-postgresql:5.1.2.6.13.1 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40 Container trento/trento-wanda:1.5.0-build1.29.1 Container trento/trento-web:2.5.0-build4.52.1 Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-Azure-LI-BYOS-Production Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-SAP-BYOS-Azure Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-BYOS-GCE Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-GCE Image SLES15-SP7-SAP-GCE-3P Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-BYOS-Azure Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Image SLES15-SP7-SAP-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Hardened-GCE Image ai_15_6 Image pr_15_7 Image proxy-httpd-image Image proxy-salt-broker-image Image server-database-migration-image Image server-hub-xmlrpc-api-image Image server-image Image server-migration-14-16-image Image server-postgresql-image Image server-saline-image Affected
Container suse/ltss/sle12.5/sles12sp5:8.5.107 Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production Affected
Container suse/manager/4.3/proxy-httpd:4.3.15.9.63.42 Container suse/manager/4.3/proxy-salt-broker:4.3.15.9.53.52 Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:5.4.4.5.18 Container suse/sle-micro/5.3/toolbox:14.2-6.11.153 Container suse/sle-micro/5.4/toolbox:14.2-5.19.153 Container suse/sle-micro/5.5/toolbox:14.2-3.12.57 Container suse/sle-micro/5.5:2.0.4-5.5.325 Container suse/sle-micro/base-5.5:2.0.4-5.8.184 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.352 Container suse/sle-micro/rt-5.5:2.0.4-4.5.427 Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-CHOST-BYOS Image SLES15-SP4-CHOST-BYOS-Aliyun Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0 Image SLES15-SP5-Manager-Server-5-0-Azure-llc Image SLES15-SP5-Manager-Server-5-0-Azure-ltd Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-EC2-llc Image SLES15-SP5-Manager-Server-5-0-EC2-ltd Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.27 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.29 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.14 Image SL-Micro Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SL-Micro-EC2 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd Affected
Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:14.2-3.13.147 Container suse/sle-micro/5.2/toolbox:14.2-7.11.149 Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Affected

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-5372 ADVISORY https://security-tracker.debian.org/tracker/dla-4385-1 ADVISORY https://ubuntu.com/security/notices/USN-7619-1 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02229/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02278/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02279/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02281/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20557/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20596/ REF https://access.redhat.com/errata/RHSA-2025:21977 REF https://access.redhat.com/errata/RHSA-2025:23024 REF https://access.redhat.com/errata/RHSA-2026:20610 REF https://access.redhat.com/errata/RHSA-2026:24349 REF https://access.redhat.com/errata/RHSA-2026:25911 REF https://access.redhat.com/security/cve/CVE-2025-5372 REF https://bugzilla.redhat.com/show_bug.cgi?id=2369388

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy