CVE catalog
CVE-2025-8277
libssh vulnerabilities
- Severity
- Low · CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.43% · Oct 25, 2026
A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | libssh | sid | 0.12.2-1 | fixed |
| Debian | libssh | forky | 0.12.2-1 | fixed |
| Debian | libssh | trixie | 0.11.5-0+deb13u1 | fixed |
| Debian | libssh | trixie-security | 0.11.5-0+deb13u1 | fixed |
| Debian | libssh | bookworm | 0.10.6-0+deb12u2 | fixed |
| Debian | libssh | bookworm-security | 0.10.6-0+deb12u3 | fixed |
| Ubuntu | libssh | noble | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh-4 | noble | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh-dev | noble | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh-doc | noble | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh-gcrypt-4 | noble | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh-gcrypt-dev | noble | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh | noble | 0.10.6-0+deb12u2 | fixed |
| Ubuntu | libssh | 22.04 | 0.9.6-1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-1build1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2build1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.2 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.3 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.4 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.5 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.6 | fixed |
| Ubuntu | libssh | 24.04 | 0.10.5-3ubuntu1 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.5-3ubuntu2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2build1 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2build2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2ubuntu0.1 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2ubuntu0.2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh | 25.10 | 0.11.1-1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.1-2 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1build1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1ubuntu0.1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1ubuntu0.2 | fixed |
| Ubuntu | libssh | pro | 0.9.0-1ubuntu1 | vulnerable |
| Ubuntu | libssh | pro | 0.9.0-1ubuntu4 | vulnerable |
| Ubuntu | libssh | pro | 0.9.0-1ubuntu5 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu1 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.1 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.2 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.3 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.4 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.5 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.5+esm1 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.5+esm2 | vulnerable |
| Ubuntu | libssh | pro | 0.9.3-2ubuntu2.5+esm3 | fixed |
| Ubuntu | libssh | 22.04 | 0.9.6-1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-1build1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2build1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.1 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.2 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.3 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.4 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.5 | vulnerable |
| Ubuntu | libssh | 22.04 | 0.9.6-2ubuntu0.22.04.6 | fixed |
| Ubuntu | libssh | 24.04 | 0.10.5-3ubuntu1 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.5-3ubuntu2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2build1 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2build2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2ubuntu0.1 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2ubuntu0.2 | vulnerable |
| Ubuntu | libssh | 24.04 | 0.10.6-2ubuntu0.3 | fixed |
| Ubuntu | libssh | 25.10 | 0.11.1-1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.1-2 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1build1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1ubuntu0.1 | vulnerable |
| Ubuntu | libssh | 25.10 | 0.11.2-1ubuntu0.2 | fixed |
| Suse | libssh | linux enterprise server ltss extended security 12 sp5 | 0.6.3-12.18.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | libssh | source | sid | 0.11.3-1 | not yet assigned | Not reported | [1114859] |
| Debian | libssh | source | forky | 0.11.3-1 | not yet assigned | Not reported | [1114859] |
| Debian | libssh | source | trixie | 0.11.2-1+deb13u1 | not yet assigned | Not reported | [1114859] |
| Debian | libssh | source | bookworm | 0.10.6-0+deb12u2 | not yet assigned | Not reported | [1114859] |
| Ubuntu | libssh | deb | noble | 0.10.6-2ubuntu0.3 | Not reported | Not reported | Not reported |
| Ubuntu | libssh-4 | deb | noble | 0.10.6-2ubuntu0.3 | Not reported | Not reported | Not reported |
| Ubuntu | libssh-dev | deb | noble | 0.10.6-2ubuntu0.3 | Not reported | Not reported | Not reported |
| Ubuntu | libssh-doc | deb | noble | 0.10.6-2ubuntu0.3 | Not reported | Not reported | Not reported |
| Ubuntu | libssh-gcrypt-4 | deb | noble | 0.10.6-2ubuntu0.3 | Not reported | Not reported | Not reported |
| Ubuntu | libssh-gcrypt-dev | deb | noble | 0.10.6-2ubuntu0.3 | Not reported | Not reported | Not reported |
| Ubuntu | libssh | deb | noble | 0.10.6-0+deb12u2 | Not reported | Not reported | Not reported |
| Ubuntu | libssh | deb | 22.04 | 0.9.6-2ubuntu0.22.04.6 | Not reported | USN-8051-1 | Not reported |
| Ubuntu | libssh | deb | 24.04 | 0.10.6-2ubuntu0.3 | Not reported | USN-8051-1 | Not reported |
| Ubuntu | libssh | deb | 25.10 | 0.11.2-1ubuntu0.2 | Not reported | USN-8051-1 | Not reported |
| Ubuntu | libssh | deb | pro | 0.9.3-2ubuntu2.5+esm3 | Not reported | UBUNTU-CVE-2025-8277 | Not reported |
| Ubuntu | libssh | deb | 22.04 | 0.9.6-2ubuntu0.22.04.6 | Not reported | UBUNTU-CVE-2025-8277 | Not reported |
| Ubuntu | libssh | deb | 24.04 | 0.10.6-2ubuntu0.3 | Not reported | UBUNTU-CVE-2025-8277 | Not reported |
| Ubuntu | libssh | deb | 25.10 | 0.11.2-1ubuntu0.2 | Not reported | UBUNTU-CVE-2025-8277 | Not reported |
| Suse | libssh | rpm | linux enterprise server ltss extended security 12 sp5 | 0.6.3-12.18.1 | Not reported | SUSE-SU-2025:3897-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libssh-4]Affected
Source package: [libssh]
Details (4)
0.10.6-0+deb12u2· amd64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u2· arm64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· amd64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· arm64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
- [libssh-dev]Affected
Source package: [libssh]
Details (4)
0.10.6-0+deb12u2· amd64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u2· arm64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· amd64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· arm64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
- [libssh-doc]Affected
Source package: [libssh]
Details (4)
0.10.6-0+deb12u2· all · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u2· all · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· all · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· all · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
- [libssh-gcrypt-4]Affected
Source package: [libssh]
Details (4)
0.10.6-0+deb12u2· amd64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u2· arm64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· amd64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· arm64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
- [libssh-gcrypt-dev]Affected
Source package: [libssh]
Details (4)
0.10.6-0+deb12u2· amd64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u2· arm64 · bookwormFixed · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· amd64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
0.10.6-0+deb12u1· arm64 · bookworm-securityAffected · Fixed:
0.10.6-0+deb12u2usn · libssh · debian · bookworm; usn · libssh · debian · 12
[Debian 13 (Trixie)]
- [libssh-4]Fixed
Source package: [libssh]
Details (4)
0.11.2-1+deb13u1· amd64 · trixieFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.2-1+deb13u1· arm64 · trixieFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.5-0+deb13u1· amd64 · trixie-securityFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.5-0+deb13u1· arm64 · trixie-securityFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
- [libssh-dev]Fixed
Source package: [libssh]
Details (4)
0.11.2-1+deb13u1· amd64 · trixieFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.2-1+deb13u1· arm64 · trixieFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.5-0+deb13u1· amd64 · trixie-securityFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.5-0+deb13u1· arm64 · trixie-securityFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
- [libssh-doc]Fixed
Source package: [libssh]
Details (4)
0.11.2-1+deb13u1· all · trixieFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.2-1+deb13u1· all · trixieFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.5-0+deb13u1· all · trixie-securityFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
0.11.5-0+deb13u1· all · trixie-securityFixed · Fixed:
0.11.2-1+deb13u1usn · libssh · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03368-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2025-8277]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-8277]
- [https://osv.dev/vulnerability/SUSE-SU-2025:3897-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-8277]
- [https://osv.dev/vulnerability/USN-8051-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-8277]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-8277.json]
- [https://ubuntu.com/security/notices/USN-8051-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2002.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]