Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: The libssh2 Project libssh2 — RHSA-2019:2136 Clear all filters
TI-2019-02871 CVE-2019-3861 · GHSA-j9j4-fcv7-j4w9

Out-of-bounds read in libssh2

Priority MEDIUM 47

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.05118 Published 2019-03-25 Partial fix CWE-125
TI-2019-02868 CVE-2019-3858 · GHSA-c4h5-vgqh-28mg

Out-of-bounds read in libssh2

Priority MEDIUM 49

An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.06448 Published 2019-03-21 Partial fix CWE-125