Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-5987

25
FAUCET Score

CVE-2025-5987 describes a high-severity vulnerability in libssh, specifically impacting its use of the ChaCha20 cipher with OpenSSL. An attacker can exploit a heap exhaustion scenario, causing libssh to utilize a partially initialized cipher context due to an aliasing error between OpenSSL and SSH_OK error codes. This critical flaw (CVSS 8.1) can lead to severe consequences, including compromised data confidentiality and integrity, or application crashes. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 0.10.0, < 0.11.2CPE matchmatch criteria
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.44%
Probability of exploitation in next 30 days
EPSS Percentile
70.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0144 is in the 29th percentile among its peer group of 8,915 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (25)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 18214-17084Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: 18208-17086Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: 20179-17086Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: cbl2 libssh 0.10.6-2 on CBL Mariner 2.0Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: azl3 libssh 0.10.6-2 on Azure Linux 3.0Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: azl3 libssh 0.10.6-1 on Azure Linux 3.0Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: cbl2 libssh 0.10.6-1 on CBL Mariner 2.0Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: 19574-16823Fixed in: 0.10.6-2
microsoftpatch availablevia msrc
Product: 19623-17084Fixed in: 0.10.6-2
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: libssh-0:0.11.1-5.el10_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.20Fixed in: rhcos-4.20.9.6.202601211057-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10.0 Extended Update SupportFixed in: libssh-0:0.11.1-4.el10_0.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: libssh-0:0.10.4-17.el9_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: libssh-0:0.10.4-9.el9_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: libssh-0:0.10.4-13.el9_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: libssh-0:0.10.4-15.el9_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: rhcos-414.92.202601191325-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: rhcos-415.92.202601271320-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: rhcos-416.94.202601160124-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: rhcos-417.94.202601120213-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: rhcos-418.94.202601202224-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.19Fixed in: rhcos-9.6.20260123-0
View patch

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
microsoft2025-Jul/CVE-2025-5987Moderate

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Jul 8, 2025
redhatCVE-2025-5987Moderate

libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend

Apr 26, 2025

References

access.redhat.com / errata/RHSA-2025:23483
access.redhat.com / errata/RHSA-2025:23484
access.redhat.com / errata/RHSA-2026:0427
access.redhat.com / errata/RHSA-2026:0428
access.redhat.com / errata/RHSA-2026:0430
access.redhat.com / errata/RHSA-2026:0431
access.redhat.com / errata/RHSA-2026:0702
access.redhat.com / errata/RHSA-2026:0978
access.redhat.com / errata/RHSA-2026:0980
access.redhat.com / errata/RHSA-2026:0985
access.redhat.com / errata/RHSA-2026:0996
access.redhat.com / errata/RHSA-2026:1539
access.redhat.com / errata/RHSA-2026:1541
access.redhat.com / errata/RHSA-2026:3415
access.redhat.com / security/cve/CVE-2025-5987
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
libssh.org / security/advisories/CVE-2025-5987.txt