csaf_suse - suse-su-2025:3897-1

SUSE-SU-2025:3897-1

Vulnerability from csaf_suse - Published: 2025-10-31 14:55 - Updated: 2025-10-31 14:55

Summary

Security update for libssh

Notes

Title of the patch

Security update for libssh

Description of the patch

This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375).

Patchnames

SUSE-2025-3897,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-3897

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is\n  repeated with incorrect guesses (bsc#1249375).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-3897,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-3897",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_3897-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:3897-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-20253897-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:3897-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-October/023132.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1249375",
        "url": "https://bugzilla.suse.com/1249375"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-8277 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-8277/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-10-31T14:55:41Z",
      "generator": {
        "date": "2025-10-31T14:55:41Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:3897-1",
      "initial_release_date": "2025-10-31T14:55:41Z",
      "revision_history": [
        {
          "date": "2025-10-31T14:55:41Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.18.1.aarch64",
                "product": {
                  "name": "libssh-devel-0.6.3-12.18.1.aarch64",
                  "product_id": "libssh-devel-0.6.3-12.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.18.1.aarch64",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.18.1.aarch64",
                  "product_id": "libssh-devel-doc-0.6.3-12.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.18.1.aarch64",
                "product": {
                  "name": "libssh4-0.6.3-12.18.1.aarch64",
                  "product_id": "libssh4-0.6.3-12.18.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh4-64bit-0.6.3-12.18.1.aarch64_ilp32",
                "product": {
                  "name": "libssh4-64bit-0.6.3-12.18.1.aarch64_ilp32",
                  "product_id": "libssh4-64bit-0.6.3-12.18.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.18.1.i586",
                "product": {
                  "name": "libssh-devel-0.6.3-12.18.1.i586",
                  "product_id": "libssh-devel-0.6.3-12.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.18.1.i586",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.18.1.i586",
                  "product_id": "libssh-devel-doc-0.6.3-12.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.18.1.i586",
                "product": {
                  "name": "libssh4-0.6.3-12.18.1.i586",
                  "product_id": "libssh4-0.6.3-12.18.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.18.1.ppc64le",
                "product": {
                  "name": "libssh-devel-0.6.3-12.18.1.ppc64le",
                  "product_id": "libssh-devel-0.6.3-12.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.18.1.ppc64le",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.18.1.ppc64le",
                  "product_id": "libssh-devel-doc-0.6.3-12.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.18.1.ppc64le",
                "product": {
                  "name": "libssh4-0.6.3-12.18.1.ppc64le",
                  "product_id": "libssh4-0.6.3-12.18.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.18.1.s390",
                "product": {
                  "name": "libssh-devel-0.6.3-12.18.1.s390",
                  "product_id": "libssh-devel-0.6.3-12.18.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.18.1.s390",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.18.1.s390",
                  "product_id": "libssh-devel-doc-0.6.3-12.18.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.18.1.s390",
                "product": {
                  "name": "libssh4-0.6.3-12.18.1.s390",
                  "product_id": "libssh4-0.6.3-12.18.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.18.1.s390x",
                "product": {
                  "name": "libssh-devel-0.6.3-12.18.1.s390x",
                  "product_id": "libssh-devel-0.6.3-12.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.18.1.s390x",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.18.1.s390x",
                  "product_id": "libssh-devel-doc-0.6.3-12.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.18.1.s390x",
                "product": {
                  "name": "libssh4-0.6.3-12.18.1.s390x",
                  "product_id": "libssh4-0.6.3-12.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.6.3-12.18.1.s390x",
                "product": {
                  "name": "libssh4-32bit-0.6.3-12.18.1.s390x",
                  "product_id": "libssh4-32bit-0.6.3-12.18.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.18.1.x86_64",
                "product": {
                  "name": "libssh-devel-0.6.3-12.18.1.x86_64",
                  "product_id": "libssh-devel-0.6.3-12.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.18.1.x86_64",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.18.1.x86_64",
                  "product_id": "libssh-devel-doc-0.6.3-12.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.18.1.x86_64",
                "product": {
                  "name": "libssh4-0.6.3-12.18.1.x86_64",
                  "product_id": "libssh4-0.6.3-12.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.6.3-12.18.1.x86_64",
                "product": {
                  "name": "libssh4-32bit-0.6.3-12.18.1.x86_64",
                  "product_id": "libssh4-32bit-0.6.3-12.18.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-doc-0.6.3-12.18.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.18.1.x86_64"
        },
        "product_reference": "libssh-devel-doc-0.6.3-12.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-8277",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-8277"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh\u0027s handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-8277",
          "url": "https://www.suse.com/security/cve/CVE-2025-8277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249375 for CVE-2025-8277",
          "url": "https://bugzilla.suse.com/1249375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-10-31T14:55:41Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-8277"
    }
  ]
}

CVE-2025-8277 (GCVE-0-2025-8277)

Vulnerability from cvelistv5 – Published: 2025-09-09 11:55 – Updated: 2025-11-21 07:29

Summary

A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.

Severity ?

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-401 - Missing Release of Memory after Effective Lifetime

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/security/cve/CVE-2025-8277	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2383888	issue-trackingx_refsource_REDHAT

Impacted products

Vendor

Product

Version

Affected: 0.6.0 , < 0.11.3 (semver)

Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Credits

Red Hat would like to thank Francesco Rollo for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-8277",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-09T19:28:17.013547Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-09T19:28:23.974Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.libssh.org",
          "defaultStatus": "unaffected",
          "packageName": "libssh",
          "versions": [
            {
              "lessThan": "0.11.3",
              "status": "affected",
              "version": "0.6.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "libssh2",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Francesco Rollo for reporting this issue."
        }
      ],
      "datePublic": "2025-09-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh\u0027s handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-401",
              "description": "Missing Release of Memory after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-21T07:29:28.733Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-8277"
        },
        {
          "name": "RHBZ#2383888",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2383888"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-07-28T11:01:26.808000+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2025-09-09T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Libssh: memory exhaustion via repeated key exchange in libssh",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. It is strongly advised to apply updated libssh packages once available to prevent memory exhaustion risks on client systems."
        }
      ],
      "x_redhatCweChain": "CWE-401: Missing Release of Memory after Effective Lifetime"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-8277",
    "datePublished": "2025-09-09T11:55:39.036Z",
    "dateReserved": "2025-07-28T11:02:27.938Z",
    "dateUpdated": "2025-11-21T07:29:28.733Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

SUSE-SU-2025:3897-1

CVE-2025-8277 (GCVE-0-2025-8277)

Tags

Sightings

Nomenclature