Lucene search

PRIOn knowledge basePRION:CVE-2019-3860

HistoryMar 25, 2019 - 7:29 p.m.

Design/Logic Flaw

2019-03-2519:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

JSON

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

CPENameOperatorVersion
debian_linuxeq8.0
libssh2ge0.3
libssh2le1.8.0
leapeq42.3
leapeq15.0

Name	Operator	Version
debian_linux	eq	8.0
libssh2	ge	0.3
libssh2	le	1.8.0
leap	eq	42.3
leap	eq	15.0

References

lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html

lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html

lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html

bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3860

lists.debian.org/debian-lts-announce/2019/03/msg00032.html

lists.debian.org/debian-lts-announce/2019/07/msg00028.html

lists.fedoraproject.org/archives/list/[email protected]/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/

seclists.org/bugtraq/2019/Apr/25

security.netapp.com/advisory/ntap-20190327-0005/

www.debian.org/security/2019/dsa-4431

www.libssh2.org/CVE-2019-3860.html

www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html