rpm package
suse/libssh2_org&distro=SUSE Linux Enterprise Server for SAP Applications 15
pkg:rpm/suse/libssh2_org&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015
Vulnerabilities (10)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-17498 | — | < 1.8.0-4.10.1 | 1.8.0-4.10.1 | Oct 21, 2019 | In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive inf | ||
| CVE-2019-3856 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 25, 2019 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the | ||
| CVE-2019-3857 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 25, 2019 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system wh | ||
| CVE-2019-3860 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 25, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | ||
| CVE-2019-3861 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 25, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memor | ||
| CVE-2019-3863 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 25, 2019 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to co | ||
| CVE-2019-3858 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 21, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | ||
| CVE-2019-3855 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 21, 2019 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the serv | ||
| CVE-2019-3862 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 20, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client m | ||
| CVE-2019-3859 | — | < 1.9.0-4.13.1 | 1.9.0-4.13.1 | Mar 20, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. |
- CVE-2019-17498Oct 21, 2019affected < 1.8.0-4.10.1fixed 1.8.0-4.10.1
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive inf
- CVE-2019-3856Mar 25, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the
- CVE-2019-3857Mar 25, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system wh
- CVE-2019-3860Mar 25, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
- CVE-2019-3861Mar 25, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memor
- CVE-2019-3863Mar 25, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to co
- CVE-2019-3858Mar 21, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
- CVE-2019-3855Mar 21, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the serv
- CVE-2019-3862Mar 20, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client m
- CVE-2019-3859Mar 20, 2019affected < 1.9.0-4.13.1fixed 1.9.0-4.13.1
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.