PT-2018-2669

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.8.1 Description The issue is related to an integer overflow flaw in the way SSH MSG CHANNEL REQUEST packets with an exit signal are parsed. This could lead to an out of bounds write, allowing a remote attacker who...

PT-2018-3089

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.8.1 Description An out of bounds read flaw was discovered in the way SSH MSG CHANNEL REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able ...