PT-2024-4333 · Westermo · Westermo L210-F2G Lynx

Name of the Vulnerable Software and Affected Versions: Westermo L210-F2G Lynx affected versions not specified Description: The issue is related to insufficient control over interaction frequency, allowing a remote attacker to cause a denial-of-service condition by sending many SSH packets...

CVE-2019-3861

An out of bounds read flaw was discovered in libssh2 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libssh2 Multiple Vulnerabilities (NS-SA-2019-0205)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libssh2 packages installed that are affected by multiple vulnerabilities: - An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attack...

libssh2 security update

CentOS Errata and Security Advisory CESA-2019:2136 An update for libssh2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : libssh2 on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: libssh2 1.8.0. Security Fixes : - libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read CVE-2019-3858 - libssh2: Out-of-bounds reads with specially crafted SSH packets CVE-2019-386...

OPENSUSE-SU-2019:1109-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492. -...

Design/Logic Flaw

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...

CVE-2019-3861

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...

SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2019:0655-1)

This update for libssh2org fixes the following issues : Security issues fixed : CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492...

SUSE SLES11 Security Update : libssh2_org (SUSE-SU-2019:13982-1)

This update for libssh2org fixes the following issues : Security issues fixed : CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492...

Libssh Releases Update to Patch 9 New Security Vulnerabilities

Libssh2, a popular open source client-side C library implementing the SSHv2 protocol, has released the latest version of its software to patch a total of nine security vulnerabilities. The Libssh2 library is available for all major distributors of the Linux operating systems, including Ubuntu, Re...

OpenSSH sshd Username Information Disclosure (CVE-2018-15473)

An information disclosure vulnerability exists in OpenSSH. The vulnerability is due to the different ways in which the sshd daemon responds to crafted SSH packets. A successful attack can result in the attacker being able to determine whether a user exists on the system...

CVE-2015-7845

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service CLI outage via crafted SSH packets...

Code injection

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service CLI outage via crafted SSH packets...

CVE-2015-0667

The CVE-2015-0667 issue affects Cisco Content Services Switch (CSS) 11500 devices running 8.20.4.02 and earlier, where the Management Interface allows bypassing restrictions on local-network device access via crafted SSH packets. Root cause: improper handling of SSH packets on the Management Inte...

Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability

A vulnerability in the Management Interface of the Cisco Content Services Switch 11500 could allow an unauthenticated, remote attacker to gain unauthorized access to other devices on the network. The vulnerability is due to improper handling of SSH packets. An attacker could exploit this...

Code injection

The SSH service on the TANDBERG Video Communication Server VCS before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets...

CVE-2008-7225

Heap-based buffer overflow in Foxit Remote Access Server aka WAC Server 2.0 Build 3503 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151...

Heap overflow

Heap-based buffer overflow in Foxit Remote Access Server aka WAC Server 2.0 Build 3503 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151...

CVE-2008-7225

Heap-based buffer overflow in Foxit Remote Access Server aka WAC Server 2.0 Build 3503 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151...