CVE-2025-4878 | libssh up to 0.11.1 privatekey_from_file uninitialized pointer

June 28, 2025 Yanac

A vulnerability, which was classified as problematic, has been found in libssh up to 0.11.1. Affected by this issue is the function privatekey_from_file. The manipulation leads to uninitialized pointer.

This vulnerability is handled as CVE-2025-4878. Access to the local network is required for this attack. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More