CVE-2025-4877
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A vulnerability in the libssh library involves an integer overflow in the bin_to_base64() function when processing an unexpectedly large input buffer passed to ssh_get_fingerprint_hash(). This leads to memory under-allocation and out-of-bounds write, causing heap corruption. The issue affects only 32-bit builds of libssh.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS) on 32-bit systems using libssh, potentially leading to application compromise or crash.
Recommendation
Immediately update the libssh library to a patched version. For 32-bit systems, prioritize applying the fix or consider migrating to a 64-bit environment.
Original NVD description (English source)
There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh.