In libssh2 v1.9.0 and earlier versions the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

SSH_MSG_DISCONNECT overflow enables out-of-bounds reads, risking disclosure or DoS in Libssh2 before 1.9.0.

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	19 May 202013:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libssh2 CVE-2019-17498.	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a libssh2 vulnerability (CVE-2019-17498)	20 Jan 202112:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilties have been fixed in the IBM Security Access Manager and IBM Security Verify Access appliances.	16 Mar 202119:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:04	–	ibm
Tenable Nessus	Amazon Linux 2 : libssh2 (ALAS-2020-1531)	28 Oct 202000:00	–	nessus
Tenable Nessus	CentOS 7 : libssh2 (RHSA-2020:3915)	20 Oct 202000:00	–	nessus
Tenable Nessus	Debian DLA-1991-1 : libssh2 security update	14 Nov 201900:00	–	nessus
Tenable Nessus	Debian DLA-2848-1 : libssh2 - LTS security update	18 Dec 202100:00	–	nessus