Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: The libssh2 Project libssh2 — FEDORA-2019-f31c14682f Clear all filters
TI-2019-02868 CVE-2019-3858 · GHSA-c4h5-vgqh-28mg

Out-of-bounds read in libssh2

Priority MEDIUM 49

An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.06448 Published 2019-03-21 Partial fix CWE-125
TI-2019-02865 CVE-2019-3855 · GHSA-hhcg-w86v-64g8

Integer overflow in libssh2

Priority MEDIUM 52

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09294 Published 2019-03-21 Partial fix CWE-190
TI-2019-02872 CVE-2019-3862 · GHSA-5c3r-rx33-wr79

Out-of-bounds read in libssh2

Priority MEDIUM 50

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.07898 Published 2019-03-20 Partial fix CWE-130
TI-2019-02869 CVE-2019-3859 · GHSA-3fjx-35vx-pq97

Out-of-bounds read in libssh2

Priority MEDIUM 54

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.06275 Published 2019-03-20 Will not fix CWE-125