Libssh 0.11.0
Approved changes feed: RSS · Atom
cpe:2.3:a:libssh:libssh:0.11.0:*:*:*:*:*:*:*part: a version: 0.11.0 update: *
| Vendor | Libssh (b9844b6c-2be9-56e2-8daa-d03c95a8d908) |
|---|---|
| Product | Libssh (d9aa66f6-4e93-5ad5-b901-72a058f21487) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/mickael9/libssh |
purl2cpe | 2026-06-01 10:14:47.395877 |
pkg:deb/debian/libssh |
purl2cpe | 2026-06-01 10:14:47.395879 |
pkg:deb/ubuntu/libssh |
purl2cpe | 2026-06-01 10:14:47.395880 |
pkg:github/libssh/libssh-mirror |
purl2cpe | 2026-06-01 10:14:47.395881 |
pkg:github/substack/libssh |
purl2cpe | 2026-06-01 10:14:47.395883 |
pkg:rpm/centos/libssh |
purl2cpe | 2026-06-01 10:14:47.395884 |
pkg:rpm/fedora/libssh |
purl2cpe | 2026-06-01 10:14:47.395886 |
pkg:rpm/opensuse/libssh |
purl2cpe | 2026-06-01 10:14:47.395887 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5449 |
vulnerable | 2026-06-08 07:37:24.426241 |
Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service
MEDIUM (6.5)
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service.
Published: 2025-07-25T17:19:39.345Z
Updated: 2026-11-05T15:37:06.104Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.