CVE-2025-8114 — Libssh: null pointer dereference in libssh kex session id calculation
A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptogra…
Published: 2025-07-24 · CVSS: 4.7 · CVSS 3.1
A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7