Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-wgkw-5cae-s3ej
Vulnerability ID VCID-wgkw-5cae-s3ej
Aliases CVE-2025-5318
Summary libssh: out-of-bounds read in sftp_handle()
Status Published
Exploitability 0.5
Weighted Severity 7.3
Risk 3.6
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:18231
ssvc Track https://access.redhat.com/errata/RHSA-2025:18231
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:18275
ssvc Track https://access.redhat.com/errata/RHSA-2025:18275
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:18286
ssvc Track https://access.redhat.com/errata/RHSA-2025:18286
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19012
ssvc Track https://access.redhat.com/errata/RHSA-2025:19012
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19098
ssvc Track https://access.redhat.com/errata/RHSA-2025:19098
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19101
ssvc Track https://access.redhat.com/errata/RHSA-2025:19101
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19295
ssvc Track https://access.redhat.com/errata/RHSA-2025:19295
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19300
ssvc Track https://access.redhat.com/errata/RHSA-2025:19300
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19313
ssvc Track https://access.redhat.com/errata/RHSA-2025:19313
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19400
ssvc Track https://access.redhat.com/errata/RHSA-2025:19400
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19401
ssvc Track https://access.redhat.com/errata/RHSA-2025:19401
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19470
ssvc Track https://access.redhat.com/errata/RHSA-2025:19470
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19472
ssvc Track https://access.redhat.com/errata/RHSA-2025:19472
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19807
ssvc Track https://access.redhat.com/errata/RHSA-2025:19807
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:19864
ssvc Track https://access.redhat.com/errata/RHSA-2025:19864
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:20943
ssvc Track https://access.redhat.com/errata/RHSA-2025:20943
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:21013
ssvc Track https://access.redhat.com/errata/RHSA-2025:21013
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:21329
ssvc Track https://access.redhat.com/errata/RHSA-2025:21329
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:21829
ssvc Track https://access.redhat.com/errata/RHSA-2025:21829
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:22275
ssvc Track https://access.redhat.com/errata/RHSA-2025:22275
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:23078
ssvc Track https://access.redhat.com/errata/RHSA-2025:23078
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:23079
ssvc Track https://access.redhat.com/errata/RHSA-2025:23079
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2025:23080
ssvc Track https://access.redhat.com/errata/RHSA-2025:23080
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2026:0326
ssvc Track https://access.redhat.com/errata/RHSA-2026:0326
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2026:1541
ssvc Track https://access.redhat.com/errata/RHSA-2026:1541
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2026:3461
ssvc Track https://access.redhat.com/errata/RHSA-2026:3461
cvssv3.1 8.1 https://access.redhat.com/errata/RHSA-2026:3462
ssvc Track https://access.redhat.com/errata/RHSA-2026:3462
cvssv3 8.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-5318.json
cvssv3.1 8.1 https://access.redhat.com/security/cve/CVE-2025-5318
ssvc Track https://access.redhat.com/security/cve/CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
epss 0.00112 https://api.first.org/data/v1/epss?cve=CVE-2025-5318
cvssv3.1 8.1 https://bugzilla.redhat.com/show_bug.cgi?id=2369131
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=2369131
cvssv3.1 5.4 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 8.1 https://www.libssh.org/security/advisories/CVE-2025-5318.txt
ssvc Track https://www.libssh.org/security/advisories/CVE-2025-5318.txt
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-5318.json
https://api.first.org/data/v1/epss?cve=CVE-2025-5318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5318
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1108407 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108407
2369131 https://bugzilla.redhat.com/show_bug.cgi?id=2369131
cpe:/a:redhat:ai_inference_server:3.2::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ai_inference_server:3.2::el9
cpe:/a:redhat:enterprise_linux:8::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/a:redhat:enterprise_linux:9::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:openshift:4.12::el8 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.12::el8
cpe:/a:redhat:openshift:4.13::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el9
cpe:/a:redhat:openshift:4.14::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el9
cpe:/a:redhat:openshift:4.15::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el9
cpe:/a:redhat:openshift:4.16::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.16::el9
cpe:/a:redhat:openshift:4.17::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.17::el9
cpe:/a:redhat:openshift:4.18::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.18::el9
cpe:/a:redhat:openshift:4.19::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.19::el9
cpe:/a:redhat:openshift:4.20::el9 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.20::el9
cpe:/a:redhat:openshift_distributed_tracing:3.7::el8 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift_distributed_tracing:3.7::el8
cpe:/a:redhat:rhel_aus:8.2::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.2::appstream
cpe:/a:redhat:rhel_aus:8.4::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_e4s:8.6::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:8.8::appstream
cpe:/a:redhat:rhel_e4s:9.0::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream
cpe:/a:redhat:rhel_e4s:9.2::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/a:redhat:rhel_eus:9.4::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
cpe:/a:redhat:rhel_tus:8.6::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_tus:8.6::appstream
cpe:/a:redhat:rhel_tus:8.8::appstream https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/o:redhat:enterprise_linux:10.0 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0
cpe:/o:redhat:enterprise_linux:10.1 https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.1
cpe:/o:redhat:enterprise_linux:8::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos
cpe:/o:redhat:enterprise_linux:9::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos
cpe:/o:redhat:rhel_aus:8.2::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos
cpe:/o:redhat:rhel_aus:8.4::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos
cpe:/o:redhat:rhel_aus:8.6::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos
cpe:/o:redhat:rhel_e4s:8.6::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos
cpe:/o:redhat:rhel_e4s:8.8::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_e4s:9.0::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos
cpe:/o:redhat:rhel_e4s:9.2::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos
cpe:/o:redhat:rhel_eus:9.4::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
cpe:/o:redhat:rhel_tus:8.6::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.8::baseos
CVE-2025-5318 https://access.redhat.com/security/cve/CVE-2025-5318
CVE-2025-5318.txt https://www.libssh.org/security/advisories/CVE-2025-5318.txt
RHSA-2025:18231 https://access.redhat.com/errata/RHSA-2025:18231
RHSA-2025:18275 https://access.redhat.com/errata/RHSA-2025:18275
RHSA-2025:18286 https://access.redhat.com/errata/RHSA-2025:18286
RHSA-2025:19012 https://access.redhat.com/errata/RHSA-2025:19012
RHSA-2025:19098 https://access.redhat.com/errata/RHSA-2025:19098
RHSA-2025:19101 https://access.redhat.com/errata/RHSA-2025:19101
RHSA-2025:19295 https://access.redhat.com/errata/RHSA-2025:19295
RHSA-2025:19300 https://access.redhat.com/errata/RHSA-2025:19300
RHSA-2025:19313 https://access.redhat.com/errata/RHSA-2025:19313
RHSA-2025:19400 https://access.redhat.com/errata/RHSA-2025:19400
RHSA-2025:19401 https://access.redhat.com/errata/RHSA-2025:19401
RHSA-2025:19470 https://access.redhat.com/errata/RHSA-2025:19470
RHSA-2025:19472 https://access.redhat.com/errata/RHSA-2025:19472
RHSA-2025:19807 https://access.redhat.com/errata/RHSA-2025:19807
RHSA-2025:19864 https://access.redhat.com/errata/RHSA-2025:19864
RHSA-2025:20943 https://access.redhat.com/errata/RHSA-2025:20943
RHSA-2025:21013 https://access.redhat.com/errata/RHSA-2025:21013
RHSA-2025:21329 https://access.redhat.com/errata/RHSA-2025:21329
RHSA-2025:21829 https://access.redhat.com/errata/RHSA-2025:21829
RHSA-2025:23078 https://access.redhat.com/errata/RHSA-2025:23078
RHSA-2025:23079 https://access.redhat.com/errata/RHSA-2025:23079
RHSA-2025:23080 https://access.redhat.com/errata/RHSA-2025:23080
RHSA-2026:0326 https://access.redhat.com/errata/RHSA-2026:0326
RHSA-2026:1541 https://access.redhat.com/errata/RHSA-2026:1541
RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3461
RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3462
USN-7619-1 https://usn.ubuntu.com/7619-1/
USN-7696-1 https://usn.ubuntu.com/7696-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:18231
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:18231
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:18275
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:18275
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:18286
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:18286
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19012
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19012
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19098
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19098
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19101
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19101
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19295
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19295
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19300
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19300
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19313
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19313
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19400
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19400
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19401
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19401
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19470
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19470
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19472
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19472
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19807
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19807
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:19864
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:19864
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:20943
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:20943
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:21013
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:21013
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:21329
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:21329
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:21829
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:21829
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:22275
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:22275
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:23078
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:23078
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:23079
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:23079
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2025:23080
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2025:23080
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2026:0326
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2026:0326
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2026:1541
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2026:1541
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2026:3461
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2026:3461
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/errata/RHSA-2026:3462
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/errata/RHSA-2026:3462
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-5318.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://access.redhat.com/security/cve/CVE-2025-5318
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://access.redhat.com/security/cve/CVE-2025-5318
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://bugzilla.redhat.com/show_bug.cgi?id=2369131
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=2369131
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Found at https://www.libssh.org/security/advisories/CVE-2025-5318.txt
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T20:41:38Z/ Found at https://www.libssh.org/security/advisories/CVE-2025-5318.txt
Exploit Prediction Scoring System (EPSS)
Percentile 0.29842
EPSS Score 0.00112
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:39:05.786084+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-5318.json 38.0.0