9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
1.4.3-alt3.M80P.1 built April 24, 2019 Aleksei Nikiforov in task #227571
April 19, 2019 Aleksei Nikiforov
- Fixes:
+ CVE-2016-0787 Truncated Diffie-Hellman secret length
+ CVE-2019-3855 Possible integer overflow in transport read allows out-of-bounds write
+ CVE-2019-3856 Possible integer overflow in keyboard interactive handling allows out-of-bounds write
+ CVE-2019-3857 Possible integer overflow leading to zero-byte allocation and out-of-bounds write
+ CVE-2019-3858 Possible zero-byte allocation leading to an out-of-bounds read
+ CVE-2019-3859 Out-of-bounds reads with specially crafted payloads due to unchecked use of
_libssh2_packet_require and _libssh2_packet_requirev
+ CVE-2019-3860 Out-of-bounds reads with specially crafted SFTP packets
+ CVE-2019-3861 Out-of-bounds reads with specially crafted SSH packets
+ CVE-2019-3862 Out-of-bounds memory comparison
+ CVE-2019-3863 Integer overflow in user authenicate keyboard interactive allows out-of-bounds writes
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ALT Linux | 8 | src | libssh2 | < 1.4.3-alt3.M80P.1 | libssh2-1.4.3-alt3.M80P.1.src.rpm |
ALT Linux | 8 | noarch | libssh2-docs | < 1.4.3-alt3.M80P.1 | libssh2-docs-1.4.3-alt3.M80P.1.noarch.rpm |
ALT Linux | 8 | x86_64 | libssh2 | < 1.4.3-alt3.M80P.1 | libssh2-1.4.3-alt3.M80P.1.x86_64.rpm |
ALT Linux | 8 | x86_64 | libssh2-debuginfo | < 1.4.3-alt3.M80P.1 | libssh2-debuginfo-1.4.3-alt3.M80P.1.x86_64.rpm |
ALT Linux | 8 | x86_64 | libssh2-devel | < 1.4.3-alt3.M80P.1 | libssh2-devel-1.4.3-alt3.M80P.1.x86_64.rpm |
ALT Linux | 8 | i586 | libssh2 | < 1.4.3-alt3.M80P.1 | libssh2-1.4.3-alt3.M80P.1.i586.rpm |
ALT Linux | 8 | i586 | libssh2-debuginfo | < 1.4.3-alt3.M80P.1 | libssh2-debuginfo-1.4.3-alt3.M80P.1.i586.rpm |
ALT Linux | 8 | i586 | libssh2-devel | < 1.4.3-alt3.M80P.1 | libssh2-devel-1.4.3-alt3.M80P.1.i586.rpm |
ALT Linux | 8 | x86_64-i586 | i586-libssh2 | < 1.4.3-alt3.M80P.1 | i586-libssh2-1.4.3-alt3.M80P.1.i586.rpm |
ALT Linux | 8 | x86_64-i586 | i586-libssh2-devel | < 1.4.3-alt3.M80P.1 | i586-libssh2-devel-1.4.3-alt3.M80P.1.i586.rpm |
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C