CVE-2025-5372

Low

No strong exploitation signal.

CVSS base

5.0 MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS — probability of exploitation (30 days)

0.4%

37.0th percentile

CISA KEV

Not listed

Weakness / dates

CWE-682

Published 2025-07-04 · modified 2026-09-01

CVSS breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector	N	Network
Attack Complexity	H	High
Privileges Required	L	Low
User Interaction	N	None
Scope	U	Unchanged
Confidentiality	L	Low
Integrity	L	Low
Availability	L	Low

Timeline

2025-07-04 — Published (NVD)
2026-09-01 — Last modified (NVD)

Description

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity, and availability.

Affected

libssh redhat

References

Official: NVD · CVE.org