TI-2019-02868 CVE-2019-3858 · GHSA-c4h5-vgqh-28mg
Out-of-bounds read in libssh2
Priority MEDIUM 49
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server.
RHSA-2019:2136
libssh2 security, bug fix, and enhancement update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libssh2-1.8.0-3.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libssh2-devel-1.8.0-3.el7, libssh2-docs-1.8.0-3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libssh2-1.8.0-3.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libssh2-devel-1.8.0-3.el7, libssh2-docs-1.8.0-3.el7
- Red Hat Enterprise Linux Server (v. 7) libssh2-1.8.0-3.el7, libssh2-1.8.0-3.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libssh2-devel-1.8.0-3.el7, libssh2-devel-1.8.0-3.el7.ppc, libssh2-docs-1.8.0-3.el7
- Red Hat Enterprise Linux Workstation (v. 7) libssh2-1.8.0-3.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libssh2-devel-1.8.0-3.el7, libssh2-docs-1.8.0-3.el7
Fixes 2 records
TI-2019-02871 CVE-2019-3861 · GHSA-j9j4-fcv7-j4w9
Out-of-bounds read in libssh2
Priority MEDIUM 47
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.