Red Hat Security AdvisoryRHSA-2020:3915
libssh2 security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libssh2-1.8.0-4.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libssh2-devel-1.8.0-4.el7, libssh2-docs-1.8.0-4.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libssh2-1.8.0-4.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libssh2-devel-1.8.0-4.el7, libssh2-docs-1.8.0-4.el7
- Red Hat Enterprise Linux Server (v. 7) libssh2-1.8.0-4.el7, libssh2-1.8.0-4.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libssh2-devel-1.8.0-4.el7, libssh2-devel-1.8.0-4.el7.ppc, libssh2-docs-1.8.0-4.el7
- Red Hat Enterprise Linux Workstation (v. 7) libssh2-1.8.0-4.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libssh2-devel-1.8.0-4.el7, libssh2-docs-1.8.0-4.el7
Fixes 1 record
Priority MEDIUM 42
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read…
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.03807 · Published 2019-10-21 · Partial fix CWE-190
