PT-2020-6930 · Libssh2 +6 · Libssh2 +6

🗓️ 28 May 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

libssh2 1.10.0 has a packet add out-of-bounds memory access that may cause denial of service.

Reporter	Title	Published	Views	Family All 239
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	28 Nov 201908:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics	11 Feb 202620:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to out of bounds memory access due to the libssh2 package (CVE-2020-22218)	23 Jul 202513:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	16 Nov 202318:47	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	19 May 202013:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libssh2 CVE-2019-17498.	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a libssh2 vulnerability (CVE-2019-17498)	20 Jan 202112:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilties have been fixed in the IBM Security Access Manager and IBM Security Verify Access appliances.	16 Mar 202119:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:04	–	ibm

Source	Link
web	www.web.archive.org/web/20250000000000*/https:/github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498
github	www.github.com/libssh2/libssh2/pull/476
bdu	www.bdu.fstec.ru/vul/2022-05961
osv	www.osv.dev/vulnerability/SUSE-SU-2023:3555-1
bdu	www.bdu.fstec.ru/vul/2023-07619
ubuntu	www.ubuntu.com/security/notices/USN-6371-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wiki	www.wiki.astralinux.ru/pages/viewpage.action
linux	www.linux.oracle.com/errata/ELSA-2023-5615.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-22218

12 Jan 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 25.8 - 7.8

CVSS 3.18.1

EPSS0.424

SSVC

libssh2 version 1.10.0 packet add function out of bounds memory access denial of service buffer overflow