7.5
Élevée
CVE-2019-3855 An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way…
Description
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libssh2 | 1.8.1 | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- [oss-security] 20190318 [SECURITY ADVISORIES] libssh2 www.openwall.com
- 20190319 [slackware-security] libssh2 (SSA:2019-077-01) seclists.org
- www.libssh2.org www.libssh2.org
- bugzilla.redhat.com bugzilla.redhat.com
- packetstormsecurity.com packetstormsecurity.com
- 107485 www.securityfocus.com
- FEDORA-2019-f31c14682f lists.fedoraproject.org
- www.broadcom.com www.broadcom.com
- [debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update lists.debian.org
- security.netapp.com security.netapp.com
- RHSA-2019:0679 access.redhat.com
- openSUSE-SU-2019:1075 lists.opensuse.org
- openSUSE-SU-2019:1109 lists.opensuse.org
- FEDORA-2019-3348cb4934 lists.fedoraproject.org
- DSA-4431 www.debian.org
- 20190415 [SECURITY] [DSA 4431-1] libssh2 security update seclists.org
- RHSA-2019:1175 access.redhat.com
- RHSA-2019:1652 access.redhat.com
- RHSA-2019:1791 access.redhat.com
- RHSA-2019:1943 access.redhat.com
- FEDORA-2019-9d85600fc7 lists.fedoraproject.org
- FEDORA-2019-5885663621 lists.fedoraproject.org
- RHSA-2019:2399 access.redhat.com
- support.apple.com support.apple.com
- 20190927 APPLE-SA-2019-9-26-7 Xcode 11.0 seclists.org
- 20190927 APPLE-SA-2019-9-26-7 Xcode 11.0 seclists.org
- www.oracle.com www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de libssh2
Les 9 CVE de libssh2 →
CVE-2019-3856
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the…
7.5
Élevée
CVE-2019-3857
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way…
7.5
Élevée
CVE-2019-3860
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed
5.0
Moyenne
CVE-2019-3861
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value…
5.0
Moyenne