CVE-2025-5372
CVE-2025-5372 · Libssh: incorrect return code handling in ssh_kdf() in libssh
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity, and availability.
CVSS 5.0 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
libssh
- Versions
- ≥ 0, < 0.11.2: Affected (semver)
Update to 0.11.2
red hat enterprise linux 8
- Versions
- ≥ 0:0.9.6-16.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 advanced mission critical update support
- Versions
- ≥ 0:0.9.4-2.el8_4.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 extended update support long-life add-on
- Versions
- ≥ 0:0.9.4-2.el8_4.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 advanced mission critical update support
- Versions
- ≥ 0:0.9.6-4.el8_6.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support long-life add-on
- Versions
- ≥ 0:0.9.6-4.el8_6.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 telecommunications update service
- Versions
- ≥ 0:0.9.6-13.el8_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 update services for sap solutions
- Versions
- ≥ 0:0.9.6-13.el8_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 9.0 update services for sap solutions
- Versions
- ≥ 0:0.9.6-3.el9_0.2: Not affected (rpm)
No fix published
red hat enterprise linux 10
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 9
No fix published
red hat openshift container platform 4
No fix published
red hat openshift container platform 4
No fix published
libssh Debian:12
- Versions
- 0.10.5-2
- 0.10.5-3
- 0.10.5-3+hurd.1
- 0.10.6-0+deb12u1
- Affected ranges
- ECOSYSTEM: < 0.10.6-0+deb12u2
Update to 0.10.6-0+deb12u2
libssh Debian:13
- Affected ranges
- ECOSYSTEM: < 0.11.2-1
Update to 0.11.2-1
libssh Debian:14
- Affected ranges
- ECOSYSTEM: < 0.11.2-1
Update to 0.11.2-1
libssh Ubuntu:Pro:16.04:LTS
- Versions
- 0.6.3-3ubuntu3
- 0.6.3-4.1
- 0.6.3-4.2
- 0.6.3-4.2ubuntu1
- 0.6.3-4.3
- 0.6.3-4.3ubuntu0.1
- 0.6.3-4.3ubuntu0.2
- 0.6.3-4.3ubuntu0.5
- 0.6.3-4.3ubuntu0.6
- 0.6.3-4.3ubuntu0.6+esm1
- 0.6.3-4.3ubuntu0.6+esm2
- 0.6.3-4.3ubuntu0.6+esm3
- 0.6.3-4.3ubuntu0.6+esm4
- 0.6.3-4.3ubuntu0.6+esm5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libssh Ubuntu:Pro:18.04:LTS
- Versions
- 0.7.5-1
- 0.8.0~20170825.94fa1e38-1
- 0.8.0~20170825.94fa1e38-1build1
- 0.8.0~20170825.94fa1e38-1ubuntu0.1
- 0.8.0~20170825.94fa1e38-1ubuntu0.2
- 0.8.0~20170825.94fa1e38-1ubuntu0.5
- 0.8.0~20170825.94fa1e38-1ubuntu0.6
- 0.8.0~20170825.94fa1e38-1ubuntu0.7
- 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm3
- 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4
- 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5
- 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm6
- 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libssh Ubuntu:Pro:20.04:LTS
- Versions
- 0.9.0-1ubuntu1
- 0.9.0-1ubuntu4
- 0.9.0-1ubuntu5
- 0.9.3-2ubuntu1
- 0.9.3-2ubuntu2
- 0.9.3-2ubuntu2.1
- 0.9.3-2ubuntu2.2
- 0.9.3-2ubuntu2.3
- 0.9.3-2ubuntu2.4
- 0.9.3-2ubuntu2.5
- 0.9.3-2ubuntu2.5+esm1
- 0.9.3-2ubuntu2.5+esm2
- 0.9.3-2ubuntu2.5+esm3
- 0.9.3-2ubuntu2.5+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libssh Ubuntu:22.04:LTS
- Versions
- 0.9.6-1
- 0.9.6-1build1
- 0.9.6-2
- 0.9.6-2build1
- 0.9.6-2ubuntu0.22.04.1
- 0.9.6-2ubuntu0.22.04.2
- 0.9.6-2ubuntu0.22.04.3
- Affected ranges
- ECOSYSTEM: < 0.9.6-2ubuntu0.22.04.4
Update to 0.9.6-2ubuntu0.22.04.4
libssh Ubuntu:24.04:LTS
- Versions
- 0.10.5-3ubuntu1
- 0.10.5-3ubuntu2
- 0.10.6-2
- 0.10.6-2build1
- 0.10.6-2build2
- Affected ranges
- ECOSYSTEM: < 0.10.6-2ubuntu0.1
Update to 0.10.6-2ubuntu0.1
Original sources
- https://access.redhat.com/errata/RHSA-2025:21977
- https://access.redhat.com/errata/RHSA-2025:23024
- https://access.redhat.com/errata/RHSA-2026:20610
- https://access.redhat.com/errata/RHSA-2026:24349
- https://access.redhat.com/errata/RHSA-2026:25911
- https://access.redhat.com/security/cve/CVE-2025-5372
- https://bugzilla.redhat.com/show_bug.cgi?id=2369388
- https://nvd.nist.gov/vuln/detail/CVE-2025-5372