Description
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS breakdown
CVSS 3.0
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux8.0 – 8.0
- Debian / debian_linux9.0 – 9.0
- fedoraproject / fedora28 – 28
- libssh2 / libssh21.2.8 – 1.8.0
- NetApp / ONTAP Select Deploy administration utility
- openSUSE / Leap15.0 – 15.0
- openSUSE / Leap42.3 – 42.3
- oracle / peoplesoft_enterprise_peopletools8.57 – 8.57
- oracle / peoplesoft_enterprise_peopletools8.56 – 8.56
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux_desktop7.0 – 7.0
- RedHat / enterprise_linux_server7.0 – 7.0
- RedHat / enterprise_linux_server_aus7.6 – 7.6
- RedHat / enterprise_linux_server_eus7.6 – 7.6
- RedHat / enterprise_linux_server_tus7.6 – 7.6
- RedHat / enterprise_linux_workstation7.0 – 7.0
- The libssh2 Project / libssh21.8.1 – 1.8.1
References
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857
- MISChttps://www.libssh2.org/CVE-2019-3857.html
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2019/03/msg00032.html
- MISChttps://security.netapp.com/advisory/ntap-20190327-0005/
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:0679
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
- VENDOR_ADVISORYhttps://www.debian.org/security/2019/dsa-4431
- MAILING_LISThttps://seclists.org/bugtraq/2019/Apr/25
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:1175
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:1652
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:1791
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:1943
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:2399
- VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
Updated 15m ago · 8 sources