NetSight
IP …
high8.8

CVE-2019-3856

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.

Impact

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Affected products

VendorProductAffected versions
Libssh2Libssh2
before 1.8.1
DebianDebian Linux
Versions 8.0, 9.0
NetappOntap Select Deploy Administration Utility
All versions
OpensuseLeap
Versions 15.0, 42.3
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Version 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Version 7.0
FedoraprojectFedora
Version 28

Weakness classification

CWE-190CWE-787

References