CVE-2019-3855

CWE-190 — Integer OverflowCWE-787 — Out-of-bounds Write16 documents9 sources
Severity
8.8HIGH
EPSS
16.2%
top 5.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
Apple XcodeLibssh2 Libssh2THE Libssh2 Project Libssh2+11 more
Timeline
PublishedMar 21
Latest updateMay 13

Description

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages10 packages

▶NVDapple/xcode< 11.0
▶NVDlibssh2/libssh2< 1.8.1
▶Debianlibssh2< 1.8.0-2.1+3
▶Ubuntulibssh2< 1.5.0-2ubuntu0.1+esm1

Also affects: Debian Linux 8.0, 9.0, Fedora 28, 29, 30, Enterprise Linux 8.0, 7.6

Patches

Patch: www.openwall.com ↗Patch: bugzilla.redhat.com ↗Patch: www.libssh2.org ↗

🔴Vulnerability Details

4
GHSA
GHSA-hhcg-w86v-64g8: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1↗2022-05-13
▶
OSV
libssh2 vulnerabilities↗2022-03-07
▶
CVEList
CVE-2019-3855: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1↗2019-03-21
▶
OSV
CVE-2019-3855: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1↗2019-03-21
▶

📋Vendor Advisories

5
Ubuntu
libssh2 vulnerabilities↗2022-03-07
▶
Apple
CVE-2019-3855: Xcode 11.0↗2019-09-20
▶
Red Hat
libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write↗2019-07-16
▶
Red Hat
libssh2: Integer overflow in transport read resulting in out of bounds write↗2019-03-13
▶
Debian
CVE-2019-3855: libssh2 - An integer overflow flaw which could lead to an out of bounds write was discover...↗2019
▶

💬Community

5
Bugzilla
CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 mingw-libssh2: various flaws [fedora-all]↗2019-03-19
▶
Bugzilla
CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 mingw-libssh2: various flaws [epel-7]↗2019-03-19
▶
Bugzilla
CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 libssh2: various flaws [fedora-all]↗2019-03-19
▶
Bugzilla
CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 libssh: various flaws [fedora-all]↗2019-03-19
▶
Bugzilla
CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write↗2019-03-11
▶
CVE-2019-3855 (HIGH CVSS 8.8) | An integer overflow flaw which coul | cvebase.io