The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-18e8506d3a advisory.

    New upstream release with security fixes for CVE-2025-4877, CVE-2025-4878, CVE-2025-5987, CVE-2025-5318,     CVE-2025-5351, CVE-2025-5372, CVE-2025-5449

    ----

    Automatic update for libssh-0.11.0-1.fc41.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_18683 advisory.

    * libssh: Double Free Vulnerability in libssh Key Export Functions (CVE-2025-5351)

    * libssh: Use of uninitialized variable in privatekey_from_file() (CVE-2025-4878)

    * libssh: Write beyond bounds in binary to base64 conversion functions (CVE-2025-4877)

    * libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation (CVE-2025-8114)

    * libssh: Memory Exhaustion via Repeated Key Exchange in libssh (CVE-2025-8277)

    * libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)

    * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)

    * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)

    * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)

    * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765985737 advisory.

  - A flaw was found in the key export functionality of libssh. The issue occurs in the internal function     responsible for converting cryptographic keys into serialized formats. During error handling, a memory     structure is freed but not cleared, leading to a potential double free issue if an additional failure     occurs later in the function. This condition may result in heap corruption or application instability in     low-memory scenarios, posing a risk to system reliability where key export operations are performed.
    (CVE-2025-5351)

  - A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID     during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL     pointer dereference. This issue can cause the client or server to crash. (CVE-2025-8114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765985737 advisory.

  - A flaw was found in the key export functionality of libssh. The issue occurs in the internal function     responsible for converting cryptographic keys into serialized formats. During error handling, a memory     structure is freed but not cleared, leading to a potential double free issue if an additional failure     occurs later in the function. This condition may result in heap corruption or application instability in     low-memory scenarios, posing a risk to system reliability where key export operations are performed.
    (CVE-2025-5351)

  - A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID     during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL     pointer dereference. This issue can cause the client or server to crash. (CVE-2025-8114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778237316 advisory.

  - A flaw was found in the key export functionality of libssh. The issue occurs in the internal function     responsible for converting cryptographic keys into serialized formats. During error handling, a memory     structure is freed but not cleared, leading to a potential double free issue if an additional failure     occurs later in the function. This condition may result in heap corruption or application instability in     low-memory scenarios, posing a risk to system reliability where key export operations are performed.
    (CVE-2025-5351)

  - A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID     during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL     pointer dereference. This issue can cause the client or server to crash. (CVE-2025-8114)

  - A malicious SCP server can send unexpected paths that could make the client application override local     files outside of working directory. This could be misused to create malicious executable or configuration     files and make the user execute them under specific consequences. This is the same issue as in OpenSSH,     tracked as CVE-2019-6111. (CVE-2026-0964)

  - A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts     files, could craft specific hostnames that when processed by the `match_pattern()` function can lead to     inefficient regular expression backtracking. This can cause timeouts and resource exhaustion, resulting in     a Denial of Service (DoS) for the client. (CVE-2026-0967)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
244363	Fedora 41 : libssh (2025-18e8506d3a)	Nessus	Fedora Local Security Checks	2025/8/6	2026/1/21	medium
355927	Rocky Linux 9 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2026_18683)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
359977	Rocky Linux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1765985737)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
360279	AlmaLinux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1765985737)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
351596	AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778237316)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/9/30	medium

检测

插件搜索

medium

high

medium

medium

medium