Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2025-15079

libssh global known_hosts override

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2025-15079

Published

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2025-15079

Published

curl

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "curl",
                    "product": "curl",
                    "versions": [
                        {
                            "version": "7.58.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "8.14.2"
                        },
                        {
                            "version": "8.15.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "8.16.1"
                        },
                        {
                            "version": "8.17.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "8.18.0"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

curl

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "curl",
                    "product": "curl",
                    "versions": [
                        {
                            "version": "c92d2e14cfb0db662f958effd2ac86f995cf1b5a",
                            "status": "affected",
                            "versionType": "git",
                            "lessThan": "adca486c125d9a6d9565b9607a19dce803a8b479"
                        }
                    ],
                    "defaultStatus": "unaffected",
                    "repo": "https://github.com/curl/curl.git"
                }

curl

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "curl",
                    "product": "curl",
                    "versions": [
                        {
                            "version": "8.17.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.16.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.15.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.14.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.14.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.13.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.12.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.12.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.11.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.11.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.10.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.10.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.9.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.9.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.8.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.7.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.7.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.6.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.5.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.3.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.2.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.2.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.1.2",
                            "status": "affected"
                        },
                        {
                            "version": "8.1.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.1.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.0.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.0.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.88.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.88.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.87.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.86.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.85.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.84.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.83.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.83.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.82.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.81.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.80.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.79.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.79.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.78.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.77.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.76.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.76.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.75.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.74.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.73.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.72.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.71.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.71.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.70.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.69.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.69.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.68.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.67.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.66.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.65.3",
                            "status": "affected"
                        },
                        {
                            "version": "7.65.2",
                            "status": "affected"
                        },
                        {
                            "version": "7.65.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.65.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.64.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.64.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.63.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.62.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.61.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.61.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.60.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.59.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.58.0",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON