7.3
Élevée
CVE-2019-3862 An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an…
Description
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libssh2 | 1.8.1 | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- [oss-security] 20190318 [SECURITY ADVISORIES] libssh2 www.openwall.com
- 20190319 [slackware-security] libssh2 (SSA:2019-077-01) seclists.org
- www.libssh2.org www.libssh2.org
- bugzilla.redhat.com bugzilla.redhat.com
- packetstormsecurity.com packetstormsecurity.com
- 107485 www.securityfocus.com
- FEDORA-2019-f31c14682f lists.fedoraproject.org
- www.broadcom.com www.broadcom.com
- [debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update lists.debian.org
- security.netapp.com security.netapp.com
- openSUSE-SU-2019:1075 lists.opensuse.org
- openSUSE-SU-2019:1109 lists.opensuse.org
- FEDORA-2019-3348cb4934 lists.fedoraproject.org
- DSA-4431 www.debian.org
- 20190415 [SECURITY] [DSA 4431-1] libssh2 security update seclists.org
- RHSA-2019:1884 access.redhat.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de libssh2
Les 9 CVE de libssh2 →
CVE-2019-3856
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the…
7.5
Élevée
CVE-2019-3857
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way…
7.5
Élevée
CVE-2019-3860
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed
5.0
Moyenne
CVE-2019-3861
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value…
5.0
Moyenne