Aller au contenu
en Se connecter
7.5 Élevée

CVE-2019-3863 A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side

Description

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.

Produits et versions touchés

Produit Versions touchées Corrigé en
libssh2 1.8.1 Pas de correctif indiqué
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de libssh2

Les 9 CVE de libssh2 →
CVE-2019-3856 An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the… 7.5 Élevée CVE-2019-3857 An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way… 7.5 Élevée CVE-2019-3860 An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed 5.0 Moyenne CVE-2019-3861 An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value… 5.0 Moyenne
Suivre cette CVE