PT-2018-3093 · Libssh2+5 · Libssh2+5

Chris Coulson · Published 2018-12-03 · Updated 2024-06-15 · CVE-2019-3856

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.8.1

Description The issue is related to an integer overflow in the libssh2 library, specifically in the way keyboard prompt requests are parsed. This could allow a remote attacker who compromises an SSH server to execute arbitrary code on the client system when a user connects to the server. The vulnerability is associated with the userauth keyboard interactive() function in the userauth.c component of the libssh2 library.

Recommendations For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider disabling the userauth keyboard interactive() function until a patch is available.

Exploit

Fix

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

ALT-PU-2019-1501

BDU:2019-03897

BDU:2021-06331

CESA-2019_0679

CESA-2019_1175

CESA-2019_1652

CVE-2019-3856

DLA-1730-1

DSA-4431-1

MGASA-2019-0139

OPENSUSE-SU-2019:1109-1

OPENSUSE-SU-2019_1075-1

OPENSUSE-SU-2019_1109-1

OPENSUSE-SU-2020:2126-1

OPENSUSE-SU-2020:2129-1

OPENSUSE-SU-2020_2126-1

OPENSUSE-SU-2020_2129-1

OPENSUSE-SU-2024:10999-1

RHSA-2019:0679

RHSA-2019:1175

RHSA-2019:1652

RHSA-2019:1791

RHSA-2019:1943

RHSA-2019:2399

RHSA-2019_0679

RHSA-2019_1175

RHSA-2019_1652

SUSE-SU-2019:0655-1

SUSE-SU-2019:13982-1

SUSE-SU-2019:13997-1

SUSE-SU-2020:3551-1

USN-5308-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Libssh2

References · 170

• 🔥❌ https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2022-05961 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3861 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3860 · Security Note
• https://bdu.fstec.ru/vul/2019-01304 · Security Note
• https://ubuntu.com/security/CVE-2019-3862 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03898 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20815 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2019-3856 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1109-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:13997-1 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2020:3551-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3857 · Vendor Advisory