A high-severity heap out-of-bounds read in libssh2 may allow an attacker to cause a denial of service or potentially leak memory contents.

This vulnerability consists of a heap out-of-bounds read (CWE-125) and use of an uninitialized resource (CWE-908) within the public key subsystem. An attacker can trigger this condition through specially crafted packets, leading to process instability.

Exploitation of this vulnerability can result in service disruption, which impacts system availability. With a CVSS score of 7.5, the risk is elevated due to the potential for memory corruption which may lead to deeper exploitation scenarios in memory-unsafe environments.

Immediate Action: Update the libssh2 library to the version containing the fix in commit a13bb6c773f0d55ad1628cede57e99803cd898d9.

Proactive Monitoring: Monitor for abnormal memory usage or service termination events in applications that handle SSH public key authentication.

Compensating Controls: Restrict access to SSH interfaces to known, trusted IP addresses to limit the exposure of the library to untrusted actors.

Public Exploit Available: No confirmed public exploit available.

Security teams should audit their software supply chain to identify applications bundling libssh2 and ensure they are patched. Prompt remediation is recommended to prevent potential service degradation or memory-based attacks.