GHSA-98qw-prqm-9f4p

GHSA-98qw-prqm-9f4p PUBLISHED CVSS 5.400000095367432 MEDIUM

Record from GitHub Advisory Database · Published June 26, 2025

A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
libssh	Chainguard	0.11.3-r0
libssh2	Wolfi	1.11.1-r1
libssh	Wolfi	0.11.3-r0
libssh2	Chainguard	1.11.1-r1

Risk scores

CVSS 3.1

5.400000095367432

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Vendor	Product	Versions
chainguard	libssh	0
wolfi	libssh2	0
wolfi	libssh	0
chainguard	libssh2	0

Timeline

Jun 26, 2025 CVE Published
Apr 10, 2026 Distribution Patch (27 in total, the first dated here)
Apr 10, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-98qw-prqm-9f4p
vulnetix vdb fixes GHSA-98qw-prqm-9f4p

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-98qw-prqm-9f4p/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 11 more

Look up in the Resolve Platform →