CVE-2025-4878

LOW3.6

Libssh: use of uninitialized variable in privatekey_from_file()

Published Jul 22, 2025

Modified 2 months ago

Details

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.

References

WEBhttps://access.redhat.com/security/cve/CVE-2025-4878 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=2376184 WEBhttps://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1 WEBhttps://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-4878

CVSS Analysis

CVSS v3.1

3.6

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

NoneA:N

3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness Type (CWE)

Memory Safety

CWE-416

Use After Free

Ecosystems

Timeline

PublishedJul 22, 2025

ModifiedNov 21, 2025