SecuriTricks - CVE-2025-5372

Description

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity, and availability.

Product(s) Impacted

Vendor	Product	Versions
Libssh	Libssh	*
Openssl	Openssl	<3.0

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-682

Incorrect Calculation

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	libssh	libssh	/	/	/	/	/	/	/	/
a	openssl	openssl	<3.0	/	/	/	/	/	/	/

References

https://access.redhat.com/security/cve/CVE-2025-5372

https://bugzilla.redhat.com/show_bug.cgi?id=2369388

CVSS Score

5.0 / 10

CVSS Data - 3.1

Attack Vector: NETWORK
Attack Complexity: HIGH
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

View Vector String

Timeline

Published: July 4, 2025, 6:15 a.m.
Last Modified: July 4, 2025, 6:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

secalert@redhat.com

CVE-2025-5372