IM
IronMonkey Threat Research

CVE-2019-3861 CRITICAL

Published: 2019-03-25 | Last Modified: 2026-06-17 | Status: Modified

Description

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Additional Descriptions (1)

Se ha descubierto un error de lectura fuera de límites en libssh2, en versiones anteriores a la 1.8.1, en la forma en la que se analizan los paquetes SSH con un valor de longitud de relleno mayor que el propio paquete. Un atacante remoto que comprometa un servidor SSH podría ser capaz de provocar una denegación de servicio o una lectura de datos en la memoria del cliente.

CVSS Metrics

Base Score: 6.4 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 4.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-125
[email protected] Primary
en CWE-125

Affected Products

Vendor Product Version Update Type
libssh2 libssh2 * <built-in method update of dict object at 0x7fd3408f6400> Application
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd3606e1d40> Operating System
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd3408f4780> Application
opensuse leap 15.0 <built-in method update of dict object at 0x7fd36a07f4c0> Operating System
opensuse leap 42.3 <built-in method update of dict object at 0x7fd3408f7400> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

References