CVE-2025-15382
HighSummary
A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.
Risk Assessment
The vulnerability may lead to disclosure of heap memory contents, potentially aiding further attacks or compromising data confidentiality. It requires authentication but can be exploited remotely via SCP.
Recommendation
It is recommended to immediately update the wolfSSH library to a version containing the fix for CVE-2025-15382. If updating is not possible, restrict SCP access to trusted users only.
Other vulnerabilities in wolfSSH
Original NVD description (English source)
A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.