CVE search · CVE-2019-3855
CVE-2019-3855
high 8.8
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Details
- Status
- Modified
- Published
- Last changed
- Source
- secalert@redhat.com
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 3.0 | high 7.5 | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
secalert@redhat.comSecondary |
| CVSS 2.0 | high 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- libssh2 · libssh2
- fedoraproject · fedora
- debian · debian_linux
- netapp · ontap_select_deploy_administration_utility
- redhat · enterprise_linux
- redhat · enterprise_linux_desktop
- redhat · enterprise_linux_server
- redhat · enterprise_linux_server_aus
- redhat · enterprise_linux_server_eus
- redhat · enterprise_linux_server_tus
- redhat · enterprise_linux_workstation
- opensuse · leap
- apple · xcode
- oracle · peoplesoft_enterprise_peopletools
References
- http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.htmlThird Party Advisory
- http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.htmlThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2019/Sep/42Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2019/03/18/3Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/107485Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:0679Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1175Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1652Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1791Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1943Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2399Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00032.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/
- https://seclists.org/bugtraq/2019/Apr/25Mailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Mar/25Mailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Sep/49Mailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20190327-0005/Third Party Advisory
- https://support.apple.com/kb/HT210609Third Party Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767Third Party Advisory
- https://www.debian.org/security/2019/dsa-4431Third Party Advisory
- https://www.libssh2.org/CVE-2019-3855.htmlPatchVendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.htmlThird Party Advisory
- http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.htmlThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2019/Sep/42Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2019/03/18/3Mailing ListPatchThird Party Advisory
- http://www.securityfocus.com/bid/107485Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:0679Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1175Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1652Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1791Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1943Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2399Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00032.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/
- https://seclists.org/bugtraq/2019/Apr/25Mailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Mar/25Mailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Sep/49Mailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20190327-0005/Third Party Advisory
- https://support.apple.com/kb/HT210609Third Party Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767Third Party Advisory
- https://www.debian.org/security/2019/dsa-4431Third Party Advisory
- https://www.libssh2.org/CVE-2019-3855.htmlPatchVendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlPatchThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html