CVE-2025-8114: Libssh: null pointer dereference in libssh kex session id calculation
: null pointer dereference in libssh kex session id calculation
Other sources
A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.
— NVD
NULL Pointer Dereference vulnerability in the session ID calculation logic of the libssh library. The flaw arises from improper handling of allocation errors during cryptographic operations in the key exchange (KEX) phase. If a memory allocation fails, the resulting NULL pointer may be dereferenced, leading to a crash in both SSH clients and servers. This vulnerability can be exploited by a local attacker with limited privileges and no user interaction, potentially disrupting services that rely on libssh for secure communication.The issue affects libssh versions up to and including 0.11.2.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/libsshto a version that resolves this vulnerability.Fixed in 0.11.3-r0 - Upgrade
Upgrade
debian/libsshto a version that resolves this vulnerability.Fixed in 0.10.6-0+deb12u2 - Upgrade
Upgrade
debian/libsshto a version that resolves this vulnerability.Fixed in 0.11.2-1+deb13u1 - Upgrade
Upgrade
debian/libsshto a version that resolves this vulnerability.Fixed in 0.11.3-1 - Upgrade
Upgrade
debian/libsshto a version that resolves this vulnerability.Fixed in 0.10.6-0+deb12u2Fixed in 0.10.6-0+deb12u3Fixed in 0.11.5-0+deb13u1Fixed in 0.12.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8114?
CVE-2025-8114 is classified as a medium severity vulnerability due to potential client or server crashes.
How do I fix CVE-2025-8114?
To fix CVE-2025-8114, update libssh to version 0.11.3 or later where the vulnerability is addressed.
What types of systems are affected by CVE-2025-8114?
CVE-2025-8114 affects systems using libssh versions up to and including 0.11.2.
What is the impact of CVE-2025-8114?
The impact of CVE-2025-8114 includes potential crashes for both clients and servers during key exchange.
Is CVE-2025-8114 a remote code execution vulnerability?
No, CVE-2025-8114 is not a remote code execution vulnerability; it primarily causes crashes due to NULL pointer dereferencing.