CVE-2025-8114

Publication date

2025-07-24 14:14:47

Family

redhat

State

PUBLISHED

Description

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.