Denial Of Service (DoS)

🗓️ 19 Mar 2019 02:54:58Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

libssh2.so denial of service vulnerability due to unchecked integer overflow in keyboard interactive handlin

Reporter	Title	Published	Views	Family All 179
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	28 Nov 201908:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in libssh2	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Open Source vulnerabilities	10 Jan 202008:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by multiple vulnerabilities in libssh2	4 Jun 202015:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities (CVE-2019-3855, CVE-2019-3856, CVE-2019-3857, CVE-2019-3863)	16 Jul 201919:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabiliies in libssh2 affect PowerKVM	17 May 201916:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	30 May 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to Using Components with Known Vulnerabilities	28 Oct 202017:16	–	ibm

Vulners

Node

libssh2.so libssh2.soRange1.0.1–1.0.1-1.9.0-5.epel8.playground.x86_64.debugcpp

libssh2 libssh2Match1.4.2_1.el6

libssh2 libssh2Match1.4.2_2.el6_7.1

libssh2 libssh2Match1.2.2_7.el6

libssh2 libssh2Match1.2.2_7.el6_1.1

libssh2 libssh2Match1.4.2_1.el6_6.1

libssh2 libssh2Match1.2.2_7.el6_2.3

libssh2 libssh2Match1.2.2_11.el6_3

libssh2 libssh2Range1.4.3.1–1.4.3.3cpp

Source	Link
github	www.github.com/libssh2/libssh2/commit/dc109a7f518757741590bb993c0c8412928ccec2
libssh2	www.libssh2.org/CVE-2019-3856.html
seclists	www.seclists.org/bugtraq/2019/Apr/25
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00032.html
debian	www.debian.org/security/2019/dsa-4431
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20190327-0005/
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

08 Nov 2023 00:32Current

8.5High risk

Vulners AI Score8.5

CVSS 37.5 - 8.8

CVSS 26.8

EPSS0.04601