An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
History
No history.
Information
Published : 2019-03-21 21:29
Updated : 2024-02-04 20:20
NVD link : CVE-2019-3855
Mitre link : CVE-2019-3855
CVE.ORG link : CVE-2019-3855
JSON object : View
Products Affected
debian
- debian_linux
apple
- xcode
redhat
- enterprise_linux_server_tus
- enterprise_linux_server_aus
- enterprise_linux_workstation
- enterprise_linux_server_eus
- enterprise_linux_server
- enterprise_linux
- enterprise_linux_desktop
oracle
- peoplesoft_enterprise_peopletools
opensuse
- leap
netapp
- ontap_select_deploy_administration_utility
fedoraproject
- fedora
libssh2
- libssh2