Lucene search
OracleLinuxELSA-2019-1652HistoryJul 02, 2019 - 12:00 a.m.
libssh2 security update
2019-07-0200:00:00
linux.oracle.com
145
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.01 Low
EPSS
Percentile
81.9%
[1.4.2-3.0.1.el6_10.1]
- [Orabug: 29909723] Added patch CVE-2019-3862. ([email protected])
Added Additional length checks to prevent out-of-bounds (CVE-2019-3862)
[1.4.2-3.el6_10.1] - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)
- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 6 | src | libssh2 | < 1.4.2-3.0.1.el6_10.1 | libssh2-1.4.2-3.0.1.el6_10.1.src.rpm |
| oracle linux | 6 | i686 | libssh2 | < 1.4.2-3.0.1.el6_10.1 | libssh2-1.4.2-3.0.1.el6_10.1.i686.rpm |
| oracle linux | 6 | i686 | libssh2-devel | < 1.4.2-3.0.1.el6_10.1 | libssh2-devel-1.4.2-3.0.1.el6_10.1.i686.rpm |
| oracle linux | 6 | i686 | libssh2-docs | < 1.4.2-3.0.1.el6_10.1 | libssh2-docs-1.4.2-3.0.1.el6_10.1.i686.rpm |
| oracle linux | 6 | src | libssh2 | < 1.4.2-3.0.1.el6_10.1 | libssh2-1.4.2-3.0.1.el6_10.1.src.rpm |
| oracle linux | 6 | i686 | libssh2 | < 1.4.2-3.0.1.el6_10.1 | libssh2-1.4.2-3.0.1.el6_10.1.i686.rpm |
| oracle linux | 6 | x86_64 | libssh2 | < 1.4.2-3.0.1.el6_10.1 | libssh2-1.4.2-3.0.1.el6_10.1.x86_64.rpm |
| oracle linux | 6 | i686 | libssh2-devel | < 1.4.2-3.0.1.el6_10.1 | libssh2-devel-1.4.2-3.0.1.el6_10.1.i686.rpm |
| oracle linux | 6 | x86_64 | libssh2-devel | < 1.4.2-3.0.1.el6_10.1 | libssh2-devel-1.4.2-3.0.1.el6_10.1.x86_64.rpm |
| oracle linux | 6 | x86_64 | libssh2-docs | < 1.4.2-3.0.1.el6_10.1 | libssh2-docs-1.4.2-3.0.1.el6_10.1.x86_64.rpm |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2019-1393)
2020-01-23 00:00:00
CentOS Update for libssh2 CESA-2019:0679 centos7
2019-04-03 00:00:00
CentOS Update for libssh2 CESA-2019:1652 centos6
2019-07-04 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.1.0 : libssh2 (EulerOS-SA-2019-1393)
2019-05-14 00:00:00
Amazon Linux AMI : libssh2 (ALAS-2019-1254)
2019-08-13 00:00:00
Scientific Linux Security Update : libssh2 on SL6.x i386/x86_64 (20190702)
2019-07-03 00:00:00
ibm
ibm
centos
centos
libssh2 security update
2019-04-01 19:09:06
libssh2 security update
2019-07-03 17:00:57
libssh2 security update
2016-03-10 12:05:04
redhat
redhat
(RHSA-2019:1652) Important: libssh2 security update
2019-07-02 10:35:51
(RHSA-2019:0679) Important: libssh2 security update
2019-03-28 12:52:01
(RHSA-2019:1791) Important: libssh2 security update
2019-07-16 11:50:39
oraclelinux
oraclelinux
libssh2 security update
2019-03-28 00:00:00
libssh2 security, bug fix, and enhancement update
2019-08-13 00:00:00
libssh2 security update
2020-10-06 00:00:00
amazon
amazon
Important: libssh2
2019-08-12 18:05:00
Important: libssh2
2019-04-25 16:44:00
Medium: libssh2
2019-09-30 22:51:00
f5
f5
K90011301 : libssh2 vulnerabilities CVE-2019-3856, CVE-2019-3857, and CVE-2019-3863
2020-09-18 00:00:00
SOL21531693 - libssh2 vulnerability CVE-2016-0787
2016-08-11 00:00:00
K21531693 : libssh2 vulnerability CVE-2016-0787
2016-08-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libssh2 version 1.4.3-alt3.M80P.1
2019-04-24 00:00:00
thn
thn
Libssh Releases Update to Patch 9 New Security Vulnerabilities
2019-03-19 10:27:00
fedora
fedora
[SECURITY] Fedora 28 Update: libssh2-1.8.1-1.fc28
2019-04-05 01:56:16
[SECURITY] Fedora 29 Update: libssh2-1.8.1-1.fc29
2019-03-23 02:58:27
[SECURITY] Fedora 30 Update: libssh2-1.8.2-1.fc30
2019-04-05 00:02:26
debian
debian
[SECURITY] [DSA 4431-1] libssh2 security update
2019-04-13 13:11:16
[SECURITY] [DSA 4431-1] libssh2 security update
2019-04-13 13:11:16
[SECURITY] [DLA 1730-1] libssh2 security update
2019-03-26 14:15:17
suse
suse
Security update for libssh2_org (moderate)
2019-04-02 00:00:00
Security update for libssh2_org (moderate)
2019-03-28 00:00:00
Security update for libssh2_org (moderate)
2020-12-01 00:00:00
archlinux
archlinux
[ASA-201903-12] libssh2: multiple issues
2019-03-22 00:00:00
libssh2: man-in-the-middle
2016-02-25 00:00:00
lib32-libssh2: man-in-the-middle
2016-02-25 00:00:00
mageia
mageia
Updated libssh2 packages fix security vulnerability
2019-04-11 00:25:19
Updated libssh2 packages fix security vulnerability
2016-11-22 01:18:01
osv
osv
libssh2 - security update
2019-03-26 00:00:00
libssh2 - security update
2019-04-13 00:00:00
libssh2 vulnerabilities
2022-03-07 23:47:01
fortinet
fortinet
Protect
2019-11-14 00:00:00
slackware
slackware
[slackware-security] libssh2
2019-03-18 23:39:28
freebsd
freebsd
libssh2 -- multiple issues
2019-03-14 00:00:00
myhack58
myhack58
ubuntu
ubuntu
libssh2 vulnerabilities
2022-03-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2019-0222
2019-04-02 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0149
2019-04-05 00:00:00
Critical Photon OS Security Update - PHSA-2019-0149
2019-04-05 00:00:00
redhatcve
redhatcve
CVE-2019-3855
2020-04-05 17:02:21
veracode
veracode
Weak Diffie-Hellman Handshake Due To Truncated Secret Length
2017-01-27 08:21:44
Weak Diffie-Hellman Handshake Due To Truncated Secret Length
2019-01-15 09:10:29
Denial Of Service (DoS)
2019-03-19 02:54:58
debiancve
debiancve
alpinelinux
alpinelinux
prion
prion
Type confusion
2016-04-13 17:59:00
Integer overflow
2019-03-25 19:29:00
Integer overflow
2019-03-21 21:29:00
ubuntucve
ubuntucve
CVE-2019-3856
2019-03-25 00:00:00
CVE-2019-3862
2019-03-21 00:00:00
symantec
symantec
SA120 : Truncated Diffie-Hellman Secret Generation in libssh2
2016-04-28 08:00:00
cve
cve
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.01 Low
EPSS
Percentile
81.9%
Related for ELSA-2019-1652