CVE-2019-17498

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

• SECURITY UPDATE: Integer overflow leading to out-of-bounds write when SSH_MSG_CHANNEL_REQUEST packets with exit signal messages are parsed.
  • debian/patches/CVE-2019-3857.patch: check namelen + 1 does not overflow before allocation in exit-signal handling.
  • CVE-2019-3857
• SECURITY UPDATE: Integer overflow in bounds check in SSH_MSG_DISCONNECT packet parsing enabling out-of-bounds read.
  • debian/patches/CVE-2019-17498.patch: harden bounds checking in SSH_MSG_DISCONNECT, SSH_MSG_DEBUG, and SSH_MSG_GLOBAL_REQUEST handlers to prevent unsigned integer underflow and overflow.
  • CVE-2019-17498

• CVE-2019-13115: add bounds-checked string_buf helpers and use them in diffie_hellman_sha1() to prevent out-of-bounds read on malformed KEX reply
• CVE-2019-17498: harden bounds checks in SSH_MSG_DISCONNECT, SSH_MSG_DEBUG and SSH_MSG_GLOBAL_REQUEST handlers to prevent integer overflow / out-of-bounds read

The updated packages fix a security vulnerability:

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. (CVE-2019-17498)

This update for libssh2_org fixes the following issue:

• CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).

This update was imported from the SUSE:SLE-15:Update update project.

This update for libssh2_org fixes the following issues:

• Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes:

  • adds ECDSA keys and host key support when using OpenSSL
  • adds ED25519 key and host key support when using OpenSSL 1.1.1
  • adds OpenSSH style key file reading
  • adds AES CTR mode support when using WinCNG
  • adds PEM passphrase protected file support for Libgcrypt and WinCNG
  • adds SHA256 hostkey fingerprint
  • adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  • adds explicit zeroing of sensitive data in memory
  • adds additional bounds checks to network buffer reads
  • adds the ability to use the server default permissions when creating sftp directories
  • adds support for building with OpenSSL no engine flag
  • adds support for building with LibreSSL
  • increased sftp packet size to 256k
  • fixed oversized packet handling in sftp
  • fixed building with OpenSSL 1.1
  • fixed a possible crash if sftp stat gets an unexpected response
  • fixed incorrect parsing of the KEX preference string value
  • fixed conditional RSA and AES-CTR support
  • fixed a small memory leak during the key exchange process
  • fixed a possible memory leak of the ssh banner string
  • fixed various small memory leaks in the backends
  • fixed possible out of bounds read when parsing public keys from the server
  • fixed possible out of bounds read when parsing invalid PEM files
  • no longer null terminates the scp remote exec command
  • now handle errors when diffie hellman key pair generation fails
  • improved building instructions
  • improved unit tests

• Version update to 1.8.2: [bsc#1130103] Bug fixes:

  • Fixed the misapplied userauth patch that broke 1.8.1
  • moved the MAX size declarations from the public header This update was imported from the SUSE:SLE-15:Update update project.

This update for libssh2_org fixes the following issues:

• Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes:

  • adds ECDSA keys and host key support when using OpenSSL
  • adds ED25519 key and host key support when using OpenSSL 1.1.1
  • adds OpenSSH style key file reading
  • adds AES CTR mode support when using WinCNG
  • adds PEM passphrase protected file support for Libgcrypt and WinCNG
  • adds SHA256 hostkey fingerprint
  • adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  • adds explicit zeroing of sensitive data in memory
  • adds additional bounds checks to network buffer reads
  • adds the ability to use the server default permissions when creating sftp directories
  • adds support for building with OpenSSL no engine flag
  • adds support for building with LibreSSL
  • increased sftp packet size to 256k
  • fixed oversized packet handling in sftp
  • fixed building with OpenSSL 1.1
  • fixed a possible crash if sftp stat gets an unexpected response
  • fixed incorrect parsing of the KEX preference string value
  • fixed conditional RSA and AES-CTR support
  • fixed a small memory leak during the key exchange process
  • fixed a possible memory leak of the ssh banner string
  • fixed various small memory leaks in the backends
  • fixed possible out of bounds read when parsing public keys from the server
  • fixed possible out of bounds read when parsing invalid PEM files
  • no longer null terminates the scp remote exec command
  • now handle errors when diffie hellman key pair generation fails
  • improved building instructions
  • improved unit tests

• Version update to 1.8.2: [bsc#1130103] Bug fixes:

  • Fixed the misapplied userauth patch that broke 1.8.1
  • moved the MAX size declarations from the public header This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libssh2-1-1.9.0-3.6 package on the GA media of openSUSE Tumbleweed.

This update for libssh2_org fixes the following issues:

libssh2_org was upgraded to version 1.11.0 in SUSE Linux Enterprise Server 12 SP5 (jsc#PED-5721)

Version update to 1.11.0:

• Enhancements and bugfixes:

  • Adds support for encrypt-then-mac (ETM) MACs
  • Adds support for AES-GCM crypto protocols
  • Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  • Adds support for RSA certificate authentication
  • Adds FIDO support with *_sk() functions
  • Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  • Adds Agent Forwarding and libssh2_agent_sign()
  • Adds support for Channel Signal message libssh2_channel_signal_ex()
  • Adds support to get the user auth banner message libssh2_userauth_banner()
  • Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  • Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  • Adds wolfSSL support to CMake file
  • Adds mbedTLS 3.x support
  • Adds LibreSSL 3.5 support
  • Adds support for CMake 'unity' builds
  • Adds CMake support for building shared and static libs in a single pass
  • Adds symbol hiding support to CMake
  • Adds support for libssh2.rc for all build tools
  • Adds .zip, .tar.xz and .tar.bz2 release tarballs
  • Enables ed25519 key support for LibreSSL 3.7.0 or higher
  • Improves OpenSSL 1.1 and 3 compatibility
  • Now requires OpenSSL 1.0.2 or newer
  • Now requires CMake 3.1 or newer
  • SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  • SFTP: No longer has a packet limit when reading a directory
  • SFTP: now parses attribute extensions if they exist
  • SFTP: no longer will busy loop if SFTP fails to initialize
  • SFTP: now clear various errors as expected
  • SFTP: no longer skips files if the line buffer is too small
  • SCP: add option to not quote paths
  • SCP: Enables 64-bit offset support unconditionally
  • Now skips leading \r and \n characters in banner_receive()
  • Enables secure memory zeroing with all build tools on all platforms
  • No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  • Speed up base64 encoding by 7x
  • Assert if there is an attempt to write a value that is too large
  • WinCNG: fix memory leak in _libssh2_dh_secret()
  • Added protection against possible null pointer dereferences
  • Agent now handles overly large comment lengths
  • Now ensure KEX replies don't include extra bytes
  • Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  • Fixed possible buffer overflow in keyboard interactive code path
  • Fixed overlapping memcpy()
  • Fixed DLL import name
  • Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  • Support for building with gcc versions older than 8
  • Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  • Restores ANSI C89 compliance
  • Enabled new compiler warnings and fixed/silenced them
  • Improved error messages
  • Now uses CIFuzz
  • Numerous minor code improvements
  • Improvements to CI builds
  • Improvements to unit tests
  • Improvements to doc files
  • Improvements to example files
  • Removed 'old gex' build option
  • Removed no-encryption/no-mac builds
  • Removed support for NetWare and Watcom wmake build files

Version update to 1.10.0:

• Enhancements and bugfixes:

  • support ECDSA certificate authentication
  • fix detailed _libssh2_error being overwritten by generic errors
  • unified error handling
  • fix _libssh2_random() silently discarding errors
  • don't error if using keys without RSA
  • avoid OpenSSL latent error in FIPS mode
  • fix EVP_Cipher interface change in openssl 3
  • fix potential overwrite of buffer when reading stdout of command
  • use string_buf in ecdh_sha2_nistp() to avoid attempting…

This update for libssh2_org fixes the following issues:

• Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]

Update to 1.11.0:

• Enhancements and bugfixes

  • Adds support for encrypt-then-mac (ETM) MACs
  • Adds support for AES-GCM crypto protocols
  • Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  • Adds support for RSA certificate authentication
  • Adds FIDO support with *_sk() functions
  • Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  • Adds Agent Forwarding and libssh2_agent_sign()
  • Adds support for Channel Signal message libssh2_channel_signal_ex()
  • Adds support to get the user auth banner message libssh2_userauth_banner()
  • Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  • Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  • Adds wolfSSL support to CMake file
  • Adds mbedTLS 3.x support
  • Adds LibreSSL 3.5 support
  • Adds support for CMake 'unity' builds
  • Adds CMake support for building shared and static libs in a single pass
  • Adds symbol hiding support to CMake
  • Adds support for libssh2.rc for all build tools
  • Adds .zip, .tar.xz and .tar.bz2 release tarballs
  • Enables ed25519 key support for LibreSSL 3.7.0 or higher
  • Improves OpenSSL 1.1 and 3 compatibility
  • Now requires OpenSSL 1.0.2 or newer
  • Now requires CMake 3.1 or newer
  • SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  • SFTP: No longer has a packet limit when reading a directory
  • SFTP: now parses attribute extensions if they exist
  • SFTP: no longer will busy loop if SFTP fails to initialize
  • SFTP: now clear various errors as expected
  • SFTP: no longer skips files if the line buffer is too small
  • SCP: add option to not quote paths
  • SCP: Enables 64-bit offset support unconditionally
  • Now skips leading \r and \n characters in banner_receive()
  • Enables secure memory zeroing with all build tools on all platforms
  • No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  • Speed up base64 encoding by 7x
  • Assert if there is an attempt to write a value that is too large
  • WinCNG: fix memory leak in _libssh2_dh_secret()
  • Added protection against possible null pointer dereferences
  • Agent now handles overly large comment lengths
  • Now ensure KEX replies don't include extra bytes
  • Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  • Fixed possible buffer overflow in keyboard interactive code path
  • Fixed overlapping memcpy()
  • Fixed Windows UWP builds
  • Fixed DLL import name
  • Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  • Support for building with gcc versions older than 8
  • Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  • Restores ANSI C89 compliance
  • Enabled new compiler warnings and fixed/silenced them
  • Improved error messages
  • Now uses CIFuzz
  • Numerous minor code improvements
  • Improvements to CI builds
  • Improvements to unit tests
  • Improvements to doc files
  • Improvements to example files
  • Removed 'old gex' build option
  • Removed no-encryption/no-mac builds
  • Removed support for NetWare and Watcom wmake build files

• Bump to version 1.10.0

  • Enhancements and bugfixes:

    • support ECDSA certificate authentication
    • fix detailed _libssh2_error being overwritten by generic errors
    • unified error handling
    • fix _libssh2_random() silently discarding errors
    • don't error if using keys without RSA
    • avoid OpenSSL latent error in FIPS mode
    • fix EVP_Cipher interface change in openssl 3
    • fix potential overwrite of buffer when reading stdout of command
    • use string_buf in ecdh_sha2_nistp() to avoid attempting…

This update for libssh2_org fixes the following issue:

• CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).

This update for libssh2_org fixes the following issue:

• CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).

This update for libssh2_org fixes the following issue:

• CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).

This update for libssh2_org fixes the following issue:

• CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).

This update for libssh2_org fixes the following issue:

• CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).

This update for libssh2_org fixes the following issues:

• Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes:

  • adds ECDSA keys and host key support when using OpenSSL
  • adds ED25519 key and host key support when using OpenSSL 1.1.1
  • adds OpenSSH style key file reading
  • adds AES CTR mode support when using WinCNG
  • adds PEM passphrase protected file support for Libgcrypt and WinCNG
  • adds SHA256 hostkey fingerprint
  • adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  • adds explicit zeroing of sensitive data in memory
  • adds additional bounds checks to network buffer reads
  • adds the ability to use the server default permissions when creating sftp directories
  • adds support for building with OpenSSL no engine flag
  • adds support for building with LibreSSL
  • increased sftp packet size to 256k
  • fixed oversized packet handling in sftp
  • fixed building with OpenSSL 1.1
  • fixed a possible crash if sftp stat gets an unexpected response
  • fixed incorrect parsing of the KEX preference string value
  • fixed conditional RSA and AES-CTR support
  • fixed a small memory leak during the key exchange process
  • fixed a possible memory leak of the ssh banner string
  • fixed various small memory leaks in the backends
  • fixed possible out of bounds read when parsing public keys from the server
  • fixed possible out of bounds read when parsing invalid PEM files
  • no longer null terminates the scp remote exec command
  • now handle errors when diffie hellman key pair generation fails
  • improved building instructions
  • improved unit tests

• Version update to 1.8.2: [bsc#1130103] Bug fixes:

  • Fixed the misapplied userauth patch that broke 1.8.1
  • moved the MAX size declarations from the public header

It was discovered that libssh2 mishandled certain input. If libssh2 were used to connect to a malicious or compromised SSH server, a remote, unauthenticated attacker could possibly execute arbitrary code on the client system. (CVE-2019-3855)

It was discovered that libssh2 incorrectly handled prompt requests. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2019-3856)

It was discovered that libssh2 incorrectly handled SSH_MSG_CHANNEL_REQUEST packets. A remote attacker could possibly use this issue to execute arbitrary code, cause a denial of service, or obtain sensitive information. (CVE-2019-3857, CVE-2019-3862)

It was discovered that libssh2 incorrectly handled specially crafted SFTP packets. A remote attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2019-3858)

It was discovered that libssh2 incorrectly handled certain specially crafted packets. A remote attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2019-3859)

It was discovered that libssh2 incorrectly handled SFTP packets with empty payloads. A remote attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2019-3860)

It was discovered that libssh2 incorrectly handled padding values in SSH packets. A remote attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2019-3861)

It was discovered that libssh2 incorrectly handled interactive response messages length. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2019-3863)

It was discovered that libssh2 incorrectly handled the Diffie Hellman key exchange. A remote attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2019-13115)

It was discovered that libssh2 incorrectly handled bound checks in SSH_MSG_DISCONNECT. A remote attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2019-17498)