CVE-2019-17498

🗓️ 30 Oct 2019 09:26:03Reported by redhat.comType

In libssh2 v1.9.0, an integer overflow in SSH_MSG_DISCONNECT enables attackers to specify an arbitrary offset for a memory read, causing potential disclosure of sensitive information or denial of service

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	19 May 202013:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libssh2 CVE-2019-17498.	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a libssh2 vulnerability (CVE-2019-17498)	20 Jan 202112:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilties have been fixed in the IBM Security Access Manager and IBM Security Verify Access appliances.	16 Mar 202119:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:04	–	ibm
Tenable Nessus	Amazon Linux 2 : libssh2 (ALAS-2020-1531)	28 Oct 202000:00	–	nessus
Tenable Nessus	CentOS 7 : libssh2 (RHSA-2020:3915)	20 Oct 202000:00	–	nessus
Tenable Nessus	Debian DLA-1991-1 : libssh2 security update	14 Nov 201900:00	–	nessus
Tenable Nessus	Debian DLA-2848-1 : libssh2 - LTS security update	18 Dec 202100:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-17498
blog	www.blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Jan 2024 16:33Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25.8

CVSS 3.18.1

CVSS 36.5

EPSS0.0142