CVE-2025-5449
mediumA flaw was found in the SFTP server message decoding logic of libssh.
Vendor / product: Libssh — libssh
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.
CVSS
6.5
6.5 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (secalert@redhat.com)
Timeline (UTC)
Published: 2025-07-25 18:15
Modified: 2026-11-05 16:17
NVD status: Modified
Last synced 9 hours ago
Verified against the source API 2026-11-05 16:48 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
libssh / libssh 0.11.0, 0.11.1
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=261612179f740bc62ba363d98b3bd5e5573a811f
Patch / mitigation: https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=3443aec90188d6aab9282afc80a81df5ab72c4da
Patch / mitigation: https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=5504ff40515439a5fecbb17da7483000c4d12eb7
References
- https://access.redhat.com/security/cve/CVE-2025-5449 secalert@redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2369705 secalert@redhat.com
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=261612179f740bc62ba363... secalert@redhat.com
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=3443aec90188d6aab9282a... secalert@redhat.com
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=5504ff40515439a5fecbb1... secalert@redhat.com
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=78485f446af9b30e37eb8f... secalert@redhat.com
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=f79ec51b7fd519dbc5737a... secalert@redhat.com
- https://www.libssh.org/security/advisories/CVE-2025-5449.txt secalert@redhat.com
Data sources
NVD CVE API 2.0 — fetched 2026-11-05 16:48 UTC · record ↗