PT-2018-3091 · Libssh2+3 · Libssh2+3

Chris Coulson · Published 2018-12-03 · Updated 2024-06-15 · CVE-2019-3859

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.8.1

Description The issue is related to an out of bounds read flaw in the libssh2 packet require and libssh2 packet requirev functions of the libssh2 library. This flaw can be exploited by a remote attacker who compromises an SSH server, potentially allowing them to cause a Denial of Service or read data in the client memory.

Recommendations For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to SSH servers until the update is applied.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

CWE-130

Related Identifiers

ALT-PU-2019-1501

BDU:2019-03867

CVE-2019-3859

DLA-1730-1

DLA-1730-2

DLA-1730-3

DSA-4431-1

MGASA-2019-0139

OPENSUSE-SU-2019:1109-1

OPENSUSE-SU-2019:1291-1

OPENSUSE-SU-2019_1075-1

OPENSUSE-SU-2019_1109-1

OPENSUSE-SU-2019_1290-1

OPENSUSE-SU-2019_1291-1

OPENSUSE-SU-2020:2126-1

OPENSUSE-SU-2020:2129-1

OPENSUSE-SU-2020_2126-1

OPENSUSE-SU-2020_2129-1

OPENSUSE-SU-2024:10999-1

SUSE-SU-2019:0655-1

SUSE-SU-2019:1059-1

SUSE-SU-2019:1060-1

SUSE-SU-2019:13982-1

SUSE-SU-2019:13997-1

SUSE-SU-2019:14031-1

SUSE-SU-2019:14032-1

SUSE-SU-2019_1059-1

SUSE-SU-2019_1060-1

SUSE-SU-2019_14031-1

SUSE-SU-2020:3551-1

USN-5308-1

Affected Products

Alt Linux

Suse

Ubuntu

Libssh2

References · 160

• 🔥❌ https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2019-03866 · Security Note
• https://debian.org/security/2019/dsa-4431 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4431-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0139.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-3859 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03897 · Security Note
• https://bdu.fstec.ru/vul/2019-01304 · Security Note
• https://libssh2.org/CVE-2019-3859.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:13982-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3856 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-1501 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3863 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html · Vendor Advisory