Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

libssh2 libssh2 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2019-3857
An integer overflow flaw which could lead to an out of bounds write exists in libssh2 prior to 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a u...
Libssh2 Libssh2Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Ontap Select Deploy Administration Utility -Opensuse Leap 42.3Opensuse Leap 15.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Fedoraproject Fedora 28Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57
9.3
CVSSv2
CVE-2019-3855
An integer overflow flaw which could lead to an out of bounds write exists in libssh2 prior to 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Libssh2 Libssh2Fedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Ontap Select Deploy Administration Utility -Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Opensuse Leap 42.3Apple XcodeOracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57
NA
CVE-2023-48795
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH prior to 9.6 and other products, allows remote malicious users to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may conseque...
Openbsd OpensshPutty PuttyFilezilla-project Filezilla ClientMicrosoft PowershellPanic Transmit 5Panic NovaRoumenpetrov PkixsshWinscp WinscpBitvise Ssh ClientBitvise Ssh ServerLancom-systems LcosLancom-systems Lcos Fx -Lancom-systems Lcos Lx -Lancom-systems Lcos Sx 5.20Lancom-systems Lcos Sx 4.20Lancom-systems Lanconfig -Vandyke SecurecrtLibssh LibsshNet-ssh Net-ssh 7.2.0Ssh2 Project Ssh2Proftpd ProftpdFreebsd Freebsd
NA
CVE-2023-22742
libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2&...
Libgit2 Libgit2Libgit2 Libgit2 1.5.0
6.9
CVSSv2
CVE-2016-4802
Multiple untrusted search path vulnerabilities in cURL and libcurl prior to 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) security.dll, (2) secur32.dll, or (3) ws2_32.dll in ...
Haxx Curl
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook