Düşük CVSS 3.6
CVE-2025-4878: CVE-2025-4878: serbest bırakılmış belleğin kullanımı
Açıklama (NVD)
A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
Özet bilgiler
- CVSS v3.1
- 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N - CWE
- CWE-416
- Yama
- Yok / bilinmiyor