Design/Logic Flaw

🗓️ 21 Mar 2019 16:01:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 16 Views

An out of bounds read flaw in libssh2 allows remote attackers to cause Denial of Service or read client memory

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	28 Nov 201908:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in libssh2	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libssh2 affects Power Hardware Management Console (CVE-2019-3862)	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by multiple vulnerabilities in libssh2	4 Jun 202015:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-z	15 Jul 201922:35	–	ibm
FreeBSD	libssh2 -- multiple issues	14 Mar 201900:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : libssh2 (ALAS-2019-1303)	4 Oct 201900:00	–	nessus
Tenable Nessus	CentOS 7 : libssh2 (CESA-2019:1884)	12 Aug 201900:00	–	nessus

Source	Link
libssh2	www.libssh2.org/CVE-2019-3862.html
seclists	www.seclists.org/bugtraq/2019/Mar/25
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securityfocus	www.securityfocus.com/bid/107485
openwall	www.openwall.com/lists/oss-security/2019/03/18/3
packetstormsecurity	www.packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/
broadcom	www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00032.html
security	www.security.netapp.com/advisory/ntap-20190327-0005/

15 Apr 2019 12:31Current

8.8High risk

Vulners AI Score8.8

EPSS0.06559

out of bounds read libssh2 remote attacker denial of service client memory.