CVE-2025-5351: Libssh

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.

Affected products

• Libssh Libssh: from 0.10.0, before 0.11.2 (fixed in 0.11.2)
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only; version 9.0 only; version 10.0 only
• Red Hat Openshift Container Platform: version 4.0 only

Published 2025-07-04. Last modified 2026-09-01.