Debian/libssh: high 8.1
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partiall
Action: Upgrade libssh to 0.11.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.2-1 | - |
Fixed versions
| 0.11.2-1 |
Sources
- osv: DEBIAN-CVE-2025-5987#Debian:13/libssh
- https://security-tracker.debian.org/tracker/CVE-2025-5987
published · modified · JSON