IM
IronMonkey Threat Research

CVE-2019-3855 HIGH

Published: 2019-03-21 | Last Modified: 2026-06-17 | Status: Modified

Description

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Additional Descriptions (1)

Se ha descubierto un error de desbordamiento de enteros que podría conducir a una escritura fuera de límites en libssh2, en versiones anteriores a la 1.8.1, en la forma en la que los paquetes se leen desde el servidor. Un atacante remoto que comprometa un servidor SSH podría ser capaz de ejecutar código en el sistema del cliente cuando un usuario se conecta al servidor

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 5.9

Base Score: 9.3 (HIGH)

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactCOMPLETE
Integrity ImpactCOMPLETE
Availability ImpactCOMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 10.0

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-190
en CWE-787
[email protected] Primary
en CWE-190
en CWE-787

Affected Products

Vendor Product Version Update Type
libssh2 libssh2 * <built-in method update of dict object at 0x7fd39c402080> Application
fedoraproject fedora 28 <built-in method update of dict object at 0x7fd39c400600> Operating System
fedoraproject fedora 29 <built-in method update of dict object at 0x7fd39c401180> Operating System
fedoraproject fedora 30 <built-in method update of dict object at 0x7fd385620600> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd34012bdc0> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd36971c140> Operating System
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd3401f5300> Application
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd386743540> Operating System
redhat enterprise_linux_desktop 7.0 <built-in method update of dict object at 0x7fd369b56bc0> Operating System
redhat enterprise_linux_server 7.0 <built-in method update of dict object at 0x7fd349339580> Operating System
redhat enterprise_linux_server_aus 7.6 <built-in method update of dict object at 0x7fd34927d000> Operating System
redhat enterprise_linux_server_eus 7.6 <built-in method update of dict object at 0x7fd36a714940> Operating System
redhat enterprise_linux_server_tus 7.6 <built-in method update of dict object at 0x7fd36b778640> Operating System
redhat enterprise_linux_workstation 7.0 <built-in method update of dict object at 0x7fd34073bb40> Operating System
opensuse leap 42.3 <built-in method update of dict object at 0x7fd34927d300> Operating System
apple xcode * <built-in method update of dict object at 0x7fd34927d1c0> Application
oracle peoplesoft_enterprise_peopletools 8.56 <built-in method update of dict object at 0x7fd31054ba40> Application
oracle peoplesoft_enterprise_peopletools 8.57 <built-in method update of dict object at 0x7fd384e86ac0> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*

References