libssh2 out-of-bounds read vulnerability (CNVD-2019-07801)

libssh2 is a client-side C library that implements the SSH2 protocol, which is capable of executing remote commands, file transfers, and providing a secure transmission channel for remote programs. An out-of-bounds read vulnerability exists in libssh2, which can be exploited by a remote attacker ...

libssh2 integer overflow vulnerability (CNVD-2019-07799)

libssh2 is a client-side C library that implements the SSH2 protocol, which is capable of executing remote commands, file transfers, and providing a secure transmission channel for remote programs. An integer overflow vulnerability exists in libssh2, which stems from the 'libssh2transportread'...

libssh2 out-of-bounds read vulnerability (CNVD-2019-07797)

libssh2 is a client-side C library that implements the SSH2 protocol, which is capable of executing remote commands, file transfers, and providing a secure transmission channel for remote programs. An out-of-bounds read vulnerability exists in libssh2, which can be exploited by a remote attacker...

Libssh2 Integer Overflow Vulnerability

libssh2 is a client-side C library that implements the SSH2 protocol, which is capable of executing remote commands, file transfers, and providing a secure transmission channel for remote programs. An integer overflow vulnerability exists in libssh2, which stems from the 'libssh2packetadd' functi...

Libssh Releases Update to Patch 9 New Security Vulnerabilities

Libssh2, a popular open source client-side C library implementing the SSHv2 protocol, has released the latest version of its software to patch a total of nine security vulnerabilities. The Libssh2 library is available for all major distributors of the Linux operating systems, including Ubuntu, Re...

Libssh Releases Update to Patch 9 New Security Vulnerabilities

Libssh2, a popular open source client-side C library implementing the SSHv2 protocol, has released the latest version of its software to patch a total of nine security vulnerabilities. The Libssh2 library is available for all major distributors of the Linux operating systems, including Ubuntu, Re...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds write by sending multiple malicious keyboard interactive response messages whose total length is greater than the maximum characters for unsigned char...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds memory comparison by sending a malicious SSHMSGCHANNELREQUEST packet with an exit status message and no payload...

Out Of Bounds Read

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process by sending malicious SSH packet with a padding length value greater than the packet length, which would result in an out-of-bounds read when the packet is decompressed...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds read by sending an empty payload response packet to various commands such as read directory, file status, status vfs and symlink etc...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process from an out-of-bounds read by sending malicious response packet to various commands such as the sha1 and sha226 key exchange, user auth list, user auth password, public key auth etc...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to crash the process by sending a malicious SFTP packet with zero value for the payload length, causing zero-byte allocation that results in an out-of-bounds read...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server could send a SSHMSGCHANNELREQUEST packet with an exit signal message having a length of maximum unsigned integer value. This results in a length value of 1, which would cause a memory write out of bounds error or zero byte allocati...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. An integer overflow in the keyboard interactive handling allows a malicious server to crash the process resulted from an unchecked integer that leads to an out-of-bounds write error...

Denial Of Service (DoS)

libssh2.so is vulnerable to denial of service. A malicious server is able to cause a crash resulted from an unchecked integer overflow by sending a malicious packet to cause an out-of-bounds write error...

Slackware 14.2 / current : libssh2 (SSA:2019-077-01)

New libssh2 packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-077-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] libssh2

New libssh2 packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libssh2-1.8.1-i586-1slack14.2.txz: Upgraded. Fixed several security issues. For more information, see:...

libssh2 Multiple Security Vulnerabilities

Description libssh2 is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, perform unauthorized actions, cause denial-of-service conditions, retrieve sensitive information; other attacks may also be possible. Technologies Affected Oracle Linux...

libssh2 -- multiple issues

libssh2 developers report: Defend against possible integer overflows in compmethodzlibdecomp. Defend against writing beyond the end of the payload in libssh2transportread. Sanitize paddinglength - libssh2transportread. This prevents an underflow resulting in a potential out-of-bounds read if a...

[SECURITY] [DSA 4377-3] rssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4377-3 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 22, 2019 https://www.debian.org/security/faq - -...