CVE-2019-3855

🗓️ 21 Mar 2019 20:13:25Reported by redhatType

An integer overflow flaw leading to out of bounds write in libssh2 before 1.8.1

Reporter	Title	Published	Views	Family All 194
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	28 Nov 201908:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in libssh2	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Open Source vulnerabilities	10 Jan 202008:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by multiple vulnerabilities in libssh2	4 Jun 202015:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities (CVE-2019-3855, CVE-2019-3856, CVE-2019-3857, CVE-2019-3863)	16 Jul 201919:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabiliies in libssh2 affect PowerKVM	17 May 201916:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	30 May 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to Using Components with Known Vulnerabilities	28 Oct 202017:16	–	ibm

NVD

Vulners

Node

libssh2 libssh2Range<1.8.1

Node

fedoraproject fedoraMatch28

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

netapp ontap_select_deploy_administration_utilityMatch-

Node

redhat enterprise_linuxMatch8.0advanced_virtualization

redhat enterprise_linux_desktopMatch7.0

redhat enterprise_linux_serverMatch7.0

redhat enterprise_linux_server_ausMatch7.6

redhat enterprise_linux_server_eusMatch7.6

redhat enterprise_linux_server_tusMatch7.6

redhat enterprise_linux_workstationMatch7.0

Node

opensuse leapMatch42.3

Node

apple xcodeRange<11.0

Node

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

[
  {
    "product": "libssh2",
    "vendor": "The libssh2 Project",
    "versions": [
      {
        "status": "affected",
        "version": "1.8.1"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2019:1175
access	www.access.redhat.com/errata/RHSA-2019:1791
libssh2	www.libssh2.org/CVE-2019-3855.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/
securityfocus	www.securityfocus.com/bid/107485
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/
packetstormsecurity	www.packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
seclists	www.seclists.org/bugtraq/2019/Apr/25
lists	www.lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html

21 Nov 2024 04:42Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

CVSS 29.3

CVSS 37.5

EPSS0.16241

SSVC