CVE-2019-3857 (NVD)

2019-03-25

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Products Debian_linux, Fedora, Libssh2, Ontap_select_deploy_administration_utility, Leap, Peoplesoft_enterprise_peopletools, Enterprise_linux, Enterprise_linux_desktop, Enterprise_linux_server, Enterprise_linux_server_aus, Enterprise_linux_server_eus, Enterprise_linux_server_tus, Enterprise_linux_workstation
Type Out-of-bounds Write (CWE-787)
Integer Overflow or Wraparound (CWE-190)
First patch - None (likely due to unavailable code)
Links • https://security.netapp.com/advisory/ntap-20190327-0005/
• https://www.debian.org/security/2019/dsa-4431
• https://access.redhat.com/errata/RHSA-2019:1943
• https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html
• https://access.redhat.com/errata/RHSA-2019:1175