CVE-2019-3859

Debian Bug report logs - #924965 libssh2: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 Package: src:libssh2; Maintainer for src:libssh2 is Mikhail Gusarov <dottedmag@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: ...

Chris Coulson discovered several vulnerabilities in libssh2, a SSH2 client-side library, which could result in denial of service, information leaks or the execution of arbitrary code For the stable distribution (stretch), these problems have been fixed in version 170-1+deb9u1 We recommend that you upgrade your libssh2 packages For the detailed ...

An out of bounds read flaw was discovered in libssh2 before 181 in the _libssh2_packet_require and _libssh2_packet_requirev functions A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory (CVE-2019-3859) An out of bounds read flaw was discovered in libssh2 before 181 in the w ...

An out of bounds read flaw was discovered in libssh2 before 181 in the _libssh2_packet_require and _libssh2_packet_requirev functions A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory (CVE-2019-3859) An out of bounds read flaw was discovered in libssh2 before 181 in the w ...

An issue has been found in libssh2 before 181 where a server could send a specially crafted partial packet in response to various commands such as: sha1 and sha226 key exchange, user auth list, user auth password response, public key auth response, channel startup/open/forward/ setenv/request pty/x11 and session start up The result would be a me ...