Login Request a demo
High severity · published Mar 21, 2019
CVE-2019-3855
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server
8.8
CVSS
9.3%
EPSS
No
On KEV
Description
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)9.3% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
libssh2 · The libssh2 Project
1.8.1 · source: vendor, NVD
DL
Debian Linux · Debian
8.0; 9.0 · source: NVD
EL
Enterprise Linux · Redhat
8.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.6 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.6 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
7.6 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
FE
Fedora · Fedoraproject
28; 29; 30 · source: NVD
LE
Leap · Opensuse
42.3 · source: NVD
OS
Ontap Select Deploy Administration Utility · Netapp
All versions, or not specified · source: NVD
Affected product
LI
libssh2
The libssh2 Project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3855
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3855
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html
Third Party Advisory
http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
Mailing List
http://seclists.org/fulldisclosure/2019/Sep/42
Mailing List
http://www.openwall.com/lists/oss-security/2019/03/18/3
Third Party Advisory
http://www.securityfocus.com/bid/107485
More from libssh2
9.1
CVE-2019-3860
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed
9.1
CVE-2019-3861
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed
9.1
CVE-2019-3858
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server
9.1
CVE-2019-3862
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed
9.1
CVE-2019-3859
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions