CVE-2019-3860

🗓️ 30 Mar 2020 08:07:32Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 29 Views

An out of bounds read flaw in libssh2 allows remote attackers to cause denial of service or read client memory

Reporter	Title	Published	Views	Family All 133
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	28 Nov 201908:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-z	15 Jul 201922:35	–	ibm
FreeBSD	libssh2 -- multiple issues	14 Mar 201900:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : libssh2 (ALAS-2023-2046)	17 May 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libssh2 (ALAS-2023-1756)	6 Jun 202300:00	–	nessus
Tenable Nessus	Debian DLA-1730-4 : libssh2 regression update	27 Mar 201900:00	–	nessus
Tenable Nessus	Debian DSA-4431-1 : libssh2 - security update	15 Apr 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libssh2 (EulerOS-SA-2019-1308)	1 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : libssh2 (EulerOS-SA-2019-1309)	1 May 201900:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-3860
libssh2	www.libssh2.org/CVE-2019-3860.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

31 Jan 2024 22:21Current

4.2Medium risk

Vulners AI Score4.2

CVSS 26.4

CVSS 35 - 9.1

EPSS0.00972

libssh2 out of bounds remote attacker denial of service client memory