{}

{}

{}

{"acknowledgement": "Red Hat would like to thank Ronald Crane for reporting this issue.", "bugzilla": {"description": "libssh: Integer Overflow in libssh SFTP Server Packet Length Validation Leading to Denial of Service", "id": "2369705", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369705"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-190", "details": ["A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash, resulting in a denial of service."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2025-5449", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "libssh", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "libssh2", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "libssh2", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "libssh", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "libssh", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-06-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-5449\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-5449"], "statement": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it is only exploitable on 32-bit systems by authenticated users with SFTP access. The issue stems from an integer overflow in packet length validation that causes excessive memory allocation attempts, leading to a crash in the SFTP server. While the flaw does not enable memory corruption or code execution, it can disrupt availability for legitimate users.\nNo Red Hat products or offerings are affected by this vulnerability.", "threat_severity": "Moderate"}