{"id":"CVE-2019-17498","aliases":["ALPINE-CVE-2019-17498","AZL-6650","BELL-CVE-2019-17498","CLSA-2026-1776855642","CLSA-2026-1778159627","DEBIAN-CVE-2019-17498","DLA-1991-1","DLA-2848-1","DLA-3559-1","EUVD-2019-7852","GHSA-h2hf-mx7w-fhwm","JLSEC-2025-188","MGASA-2019-0343","RHSA-2020:3915","SUSE-RU-2023:4066-1","SUSE-RU-2023:4192-1","SUSE-SU-2019:14206-1","SUSE-SU-2019:14226-1","SUSE-SU-2019:2900-1","SUSE-SU-2019:2900-2","SUSE-SU-2019:2936-1","SUSE-SU-2020:3551-1","UBUNTU-CVE-2019-17498","USN-5308-1","openSUSE-SU-2019:2483-1","openSUSE-SU-2020:2126-1","openSUSE-SU-2020:2129-1","openSUSE-SU-2024:10999-1"],"status":"published","title":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03807,"percentile":0.90104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-190"],"published":"2019-10-21T00:00:00Z","modified":"2026-10-20T13:55:33Z","exploits":[{"source":"pocgithub","id":"Timon-L/3007Project","title":"Timon-L/3007Project","date":"2022-10-09","url":"https://github.com/Timon-L/3007Project"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libssh2","fixed_in":["1.9.0-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libssh2","fixed_in":["1.9.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libssh2","fixed_in":["1.9.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libssh2","fixed_in":["1.9.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libssh2","fixed_in":["1.9.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libssh2","fixed_in":["1.4.3-4.1+deb8u6"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibSSH2_jll","fixed_in":["1.10.1+0"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libssh2","fixed_in":["1.8.2-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libssh2_org","fixed_in":["1.11.0-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"libssh2_org","fixed_in":["1.4.3-17.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"libssh2_org","fixed_in":["1.2.9-4.2.12.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libssh2_org","fixed_in":["1.8.0-4.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libssh2_org","fixed_in":["1.8.0-4.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libssh2_org","fixed_in":["1.8.0-4.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libssh2_org","fixed_in":["1.8.0-4.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libssh2_org","fixed_in":["1.8.0-4.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"libssh2_org","fixed_in":["1.4.3-20.14.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","fixed_in":["1.4.3-2ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","fixed_in":["1.5.0-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libssh2_org","fixed_in":["1.8.0-lp151.6.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-r1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.0.1.el6_10.1.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.0.1.el6_10.1.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.0.1.el6_10.1.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-4.1+deb8u6"}]}],"versions":["1.4.3-4.1","1.4.3-4.1+deb8u1","1.4.3-4.1+deb8u2","1.4.3-4.1+deb8u3","1.4.3-4.1+deb8u4","1.4.3-4.1+deb8u5"]},{"source":"osv","ecosystem":"Debian:9","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1+deb9u2"}]}],"versions":["1.7.0-1","1.7.0-1+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1+deb10u1"}]}],"versions":["1.8.0-2.1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"LibSSH2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.10.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-29.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-29.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-29.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-17.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-4.2.12.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-4.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-4.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-4.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-4.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-4.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2ubuntu0.2+esm2"}]}],"versions":["1.4.3-1","1.4.3-2","1.4.3-2ubuntu0.1","1.4.3-2ubuntu0.2","1.4.3-2ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+esm1"}]}],"versions":["1.5.0-2","1.5.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.0-1","1.8.0-1ubuntu0.1","1.8.0-1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.0-2.1build1","1.8.0-2.1ubuntu0.1","1.8.0-2.1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+esm1"}]}],"versions":["1.5.0-2","1.5.0-2ubuntu0.1"],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-lp151.6.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-lp151.6.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-lp152.8.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-3.6"}]}],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libssh2","product":"libssh2"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"bootstrap_os"},{"vendor":"netapp","product":"element_software"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"netapp","product":"solidfire"},{"vendor":"opensuse","product":"leap"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c#L480","tags":["x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/","tags":["x_transferred","Broken Link","article","web","report"]},{"url":"https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498","tags":["x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB/","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00010.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://github.com/libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9c","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220909-0004/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17498","tags":["web","advisory"]},{"url":"https://github.com/libssh2/libssh2/pull/402/commits/1c6fa92b77e34d089493fe6d3e2c6c8775858b94","tags":["report"]},{"url":"https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB"},{"url":"https://security.netapp.com/advisory/ntap-20220909-0004"},{"url":"https://github.com/advisories/GHSA-h2hf-mx7w-fhwm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-17498","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-17498","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1776855642.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1778159627.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17498","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0343.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25704","tags":["report"]},{"url":"https://www.debian.org/lts/security/2019/dla-1991","tags":["web"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=943562","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3915","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766898","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3915.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17498","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17498","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/-2023-4066/suse-ru-20234066-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17498","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2023-4192/suse-ru-20234192-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914206-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1154862","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914226-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192900-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192900-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192936-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203551-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1130103","tags":["report"]},{"url":"https://bugzilla.suse.com/1178083","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3863","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-17498","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5308-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-3855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13115","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H3AQRXLVKQVS3DRKN3ELYECMDLVYDUBY/#H3AQRXLVKQVS3DRKN3ELYECMDLVYDUBY","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T00:00:00Z","modified":"2026-10-14T06:54:44.821Z","updated_at":"2026-11-02T14:20:24.989116Z"}],"euvd":[{"id":"EUVD-2019-7852","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T00:00:00Z","modified":"2026-10-14T06:54:44Z","updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-h2hf-mx7w-fhwm","title":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2022-05-24T22:01:01Z","modified":"2026-10-14T09:32:29Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:13:23.530725Z"}],"nvd":[{"id":"CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T22:15:10.523Z","modified":"2026-10-14T07:16:48.78Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"ALPINE-CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T22:15:10.523Z","modified":"2026-09-21T06:17:52.499779438Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"AZL-6650","title":"CVE-2019-17498 affecting package libssh2 for versions less than 1.9.0-1","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T22:15:10Z","modified":"2026-04-21T04:37:53.06295Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"BELL-CVE-2019-17498","title":"CVE-2019-17498 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:21.650174Z","modified":"2026-01-26T09:48:49.85243Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T22:15:10.523Z","modified":"2026-10-20T13:55:33.227927354Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T22:15:10.523Z","modified":"2026-10-15T07:47:22.91753224Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"JLSEC-2025-188","title":"In libssh2 v1.9.0 and earlier versions, the `SSH_MSG_DISCONNECT` logic in packet.c has an integer...","description":"In libssh2 v1.9.0 and earlier versions, the `SSH_MSG_DISCONNECT` logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2025-10-27T15:45:54.694Z","modified":"2026-07-23T22:30:17.607570792Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"RHSA-2020:3915","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-13T16:21:43Z","modified":"2026-10-14T10:01:27Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.","status":"published","published":"2019-10-21T22:15:00Z","modified":"2026-09-22T15:33:10.183995746Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"CLSA-2026-1776855642","title":"Fix CVE(s): CVE-2019-17498, CVE-2019-3857","description":"   * SECURITY UPDATE: Integer overflow leading to out-of-bounds write when\n     SSH_MSG_CHANNEL_REQUEST packets with exit signal messages are parsed.\n     - debian/patches/CVE-2019-3857.patch: check namelen + 1 does not\n       overflow before allocation in exit-signal handling.\n     - CVE-2019-3857\n   * SECURITY UPDATE: Integer overflow in bounds check in SSH_MSG_DISCONNECT\n     packet parsing enabling out-of-bounds read.\n     - debian/patches/CVE-2019-17498.patch: harden bounds checking in\n       SSH_MSG_DISCONNECT, SSH_MSG_DEBUG, and SSH_MSG_GLOBAL_REQUEST\n       handlers to prevent unsigned integer underflow and overflow.\n     - CVE-2019-17498","status":"published","published":"2026-04-22T11:00:47Z","modified":"2026-06-04T10:03:26.668947Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1778159627","title":"libssh2: Fix of 2 CVEs","description":"- CVE-2019-13115: add bounds-checked string_buf helpers and use them in\n  diffie_hellman_sha1() to prevent out-of-bounds read on malformed KEX\n  reply\n- CVE-2019-17498: harden bounds checks in SSH_MSG_DISCONNECT,\n  SSH_MSG_DEBUG and SSH_MSG_GLOBAL_REQUEST handlers to prevent integer\n  overflow / out-of-bounds read","status":"published","published":"2026-05-08T11:40:09Z","modified":"2026-06-01T00:33:17.177826429Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-1991-1","title":"libssh2 - security update","status":"published","published":"2019-11-13T00:00:00Z","modified":"2026-03-09T01:18:50.768953Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2848-1","title":"libssh2 - security update","status":"published","published":"2021-12-17T00:00:00Z","modified":"2026-03-09T01:21:50.913871Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3559-1","title":"libssh2 - security update","status":"published","published":"2023-09-08T00:00:00Z","modified":"2026-03-09T01:19:18.791703Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2019-0343","title":"Updated libssh2 packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\n\nIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in\npacket.c has an integer overflow in a bounds check, enabling an attacker\nto specify an arbitrary (out-of-bounds) offset for a subsequent memory\nread. A crafted SSH server may be able to disclose sensitive information\nor cause a denial of service condition on the client system when a user\nconnects to the server. (CVE-2019-17498)\n","status":"published","published":"2019-11-30T13:06:06Z","modified":"2026-04-16T04:44:28.228777092Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2483-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issue:\n\n- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-11T13:22:11Z","modified":"2026-02-04T03:34:47.582468Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:2126-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n   Enhancements and bugfixes:\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-30T17:52:05Z","modified":"2026-02-04T02:58:48.243425Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2129-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n   Enhancements and bugfixes:\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-12-01T05:25:38Z","modified":"2026-02-04T04:03:11.670285Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10999-1","title":"libssh2-1-1.9.0-3.6 on GA media","description":"These are all security issues fixed in the libssh2-1-1.9.0-3.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:25.476973Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-RU-2023:4066-1","title":"Recommended update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\nlibssh2_org was upgraded to version 1.11.0 in SUSE Linux Enterprise Server 12 SP5 (jsc#PED-5721)\n\nVersion update to 1.11.0:\n\n* Enhancements and bugfixes:\n\n    - Adds support for encrypt-then-mac (ETM) MACs\n    - Adds support for AES-GCM crypto protocols\n    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys\n    - Adds support for RSA certificate authentication\n    - Adds FIDO support with *_sk() functions\n    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends\n    - Adds Agent Forwarding and libssh2_agent_sign()\n    - Adds support for Channel Signal message libssh2_channel_signal_ex()\n    - Adds support to get the user auth banner message libssh2_userauth_banner()\n    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,\n      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options\n    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()\n    - Adds wolfSSL support to CMake file\n    - Adds mbedTLS 3.x support\n    - Adds LibreSSL 3.5 support\n    - Adds support for CMake 'unity' builds\n    - Adds CMake support for building shared and static libs in a single pass\n    - Adds symbol hiding support to CMake\n    - Adds support for libssh2.rc for all build tools\n    - Adds .zip, .tar.xz and .tar.bz2 release tarballs\n    - Enables ed25519 key support for LibreSSL 3.7.0 or higher\n    - Improves OpenSSL 1.1 and 3 compatibility\n    - Now requires OpenSSL 1.0.2 or newer\n    - Now requires CMake 3.1 or newer\n    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs\n    - SFTP: No longer has a packet limit when reading a directory\n    - SFTP: now parses attribute extensions if they exist\n    - SFTP: no longer will busy loop if SFTP fails to initialize\n    - SFTP: now clear various errors as expected\n    - SFTP: no longer skips files if the line buffer is too small\n    - SCP: add option to not quote paths\n    - SCP: Enables 64-bit offset support unconditionally\n    - Now skips leading \\r and \\n characters in banner_receive()\n    - Enables secure memory zeroing with all build tools on all platforms\n    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive\n    - Speed up base64 encoding by 7x\n    - Assert if there is an attempt to write a value that is too large\n    - WinCNG: fix memory leak in _libssh2_dh_secret()\n    - Added protection against possible null pointer dereferences\n    - Agent now handles overly large comment lengths\n    - Now ensure KEX replies don't include extra bytes\n    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER\n    - Fixed possible buffer overflow in keyboard interactive code path\n    - Fixed overlapping memcpy()\n    - Fixed DLL import name\n    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows\n    - Support for building with gcc versions older than 8\n    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files\n    - Restores ANSI C89 compliance\n    - Enabled new compiler warnings and fixed/silenced them\n    - Improved error messages\n    - Now uses CIFuzz\n    - Numerous minor code improvements\n    - Improvements to CI builds\n    - Improvements to unit tests\n    - Improvements to doc files\n    - Improvements to example files\n    - Removed 'old gex' build option\n    - Removed no-encryption/no-mac builds\n    - Removed support for NetWare and Watcom wmake build files\n\nVersion update to 1.10.0:\n\n* Enhancements and bugfixes:\n\n    - support ECDSA certificate authentication\n    - fix detailed _libssh2_error being overwritten by generic errors\n    - unified error handling\n    - fix _libssh2_random() silently discarding errors\n    - don't error if using keys without RSA\n    - avoid OpenSSL latent error in FIPS mode\n    - fix EVP_Cipher interface change in openssl 3\n    - fix potential overwrite of buffer when reading stdout of command\n    - use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data\n    - correct a typo which may lead to stack overflow\n    - fix random big number generation to match openssl\n    - added key exchange group16-sha512 and group18-sha512.\n    - add support for an OSS Fuzzer fuzzing target\n    - adds support for ECDSA for both key exchange and host key algorithms\n    - clean up curve25519 code\n    - update the min, preferred and max DH group values based on RFC 8270.\n    - changed type of LIBSSH2_FX_* constants to unsigned long\n    - added diffie-hellman-group14-sha256 kex\n    - fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression\n    - fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.\n    - fixes crash with delayed compression option using Bitvise server.\n    - adds support for PKIX key reading\n    - use new API to parse data in packet_x11_open() for better bounds checking.\n    - double the static buffer size when reading and writing known hosts\n    - improved bounds checking in packet_queue_listener\n    - improve message parsing (CVE-2019-17498)\n    - improve bounds checking in kex_agree_methods()\n    - adding SSH agent forwarding.\n    - fix agent forwarding message, updated example.\n    - added integration test code and cmake target. Added example to cmake list.\n    - don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.\n    - add an EWOULDBLOCK check for better portability\n    - fix off by one error when loading public keys with no id\n    - fix use-after-free crash on reinitialization of openssl backend\n    - preserve error info from agent_list_identities()\n    - make sure the error code is set in _libssh2_channel_open()\n    - fixed misspellings\n    - fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`\n    - rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type\n\nVersion update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n\n- Enhancements and bugfixes:\n\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header\n\nUpdate to 1.7.0\n\n* Changes:\n  - libssh2_session_set_last_error: Add function\n  - mac: Add support for HMAC-SHA-256 and HMAC-SHA-512\n  - kex: Added diffie-hellman-group-exchange-sha256 support\n  - many bugfixes\n\n\nUpdate to 1.6.0\n\n* Changes:\n\n  - Added libssh2_userauth_publickey_frommemory()\n\n* Bug fixes:\n\n  - wait_socket: wrong use of difftime()\n  - userauth: Fixed prompt text no longer being copied to the prompts struct\n  - mingw build: allow to pass custom CFLAGS\n  - Let mansyntax.sh work regardless of where it is called from\n    Init HMAC_CTX before using it\n  - direct_tcpip: Fixed channel write\n  - WinCNG: fixed backend breakage\n  - OpenSSL: caused by introducing libssh2_hmac_ctx_init\n  - userauth.c: fix possible dereferences of a null pointer\n  - wincng: Added explicit clear memory feature to WinCNG backend\n  - openssl.c: fix possible segfault in case EVP_DigestInit fails\n  - wincng: fix return code of libssh2_md5_init()\n  - kex: do not ignore failure of libssh2_sha1_init()\n  - scp: fix that scp_send may transmit not initialised memory\n  - scp.c: improved command length calculation\n  - nonblocking examples: fix warning about unused tvdiff on Mac OS X\n  - configure: make clear-memory default but WARN if backend unsupported\n  - OpenSSL: Enable use of OpenSSL that doesn't have DSA\n  - OpenSSL: Use correct no-blowfish #define\n  - kex: fix libgcrypt memory leaks of bignum\n  - libssh2_channel_open: more detailed error message\n  - wincng: fixed memleak in (block) cipher destructor\n\nUpdate to 1.5.0:\n\n* Changes:\n\n  - Added Windows Cryptography API: Next Generation based backend\n\n* Bug fixes:\n\n  - Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782\n  - missing _libssh2_error in _libssh2_channel_write\n  - knownhost: Fix DSS keys being detected as unknown.\n  - knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.\n  - libssh2.h: on Windows, a socket is of type SOCKET, not int\n  - libssh2_priv.h: a 1 bit bit-field should be unsigned\n  - Fixed two potential use-after-frees of the payload buffer\n  - Fixed a few memory leaks in error paths\n  - userauth: Fixed an attempt to free from stack on error\n  - agent_list_identities: Fixed memory leak on OOM\n  - knownhosts: Abort if the hosts buffer is too small\n  - sftp_close_handle: ensure the handle is always closed\n  - channel_close: Close the channel even in the case of errors\n  - docs: added missing libssh2_session_handshake.3 file\n  - docs: fixed a bunch of typos\n  - userauth_password: pass on the underlying error code\n  - _libssh2_channel_forward_cancel: accessed struct after free\n  - _libssh2_packet_add: avoid using uninitialized memory\n  - _libssh2_channel_forward_cancel: avoid memory leaks on error\n  - _libssh2_channel_write: client spins on write when window full\n  - publickey_packet_receive: avoid junk in returned pointers\n  - channel_receive_window_adjust: store windows size always\n  - userauth_hostbased_fromfile: zero assign to avoid uninitialized use\n  - agent_connect_unix: make sure there's a trailing zero\n  - MinGW build: Fixed redefine warnings.\n  - sftpdir.c: added authentication method detection.\n  - Watcom build: added support for WinCNG build.\n  - configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS\n  - sftp_statvfs: fix for servers not supporting statfvs extension\n  - knownhost.c: use LIBSSH2_FREE macro instead of free\n  - Fixed compilation using mingw-w64\n  - knownhost.c: fixed that 'key_type_len' may be used uninitialized\n  - configure: Display individual crypto backends on separate lines\n  - agent.c: check return code of MapViewOfFile\n  - kex.c: fix possible NULL pointer de-reference with session-\u003ekex\n  - packet.c: fix possible NULL pointer de-reference within listen_state\n  - userauth.c: improve readability and clarity of for-loops\n  - packet.c: i \u003c 256 was always true and i would overflow to 0\n  - kex.c: make sure mlist is not set to NULL\n  - session.c: check return value of session_nonblock in debug mode\n  - session.c: check return value of session_nonblock during startup\n  - userauth.c: make sure that sp_len is positive and avoid overflows\n  - knownhost.c: fix use of uninitialized argument variable wrote\n  - openssl: initialise the digest context before calling EVP_DigestInit()\n  - libssh2_agent_init: init -\u003efd to LIBSSH2_INVALID_SOCKET\n  - configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib\n  - configure.ac: Rework crypto library detection\n  - configure.ac: Reorder --with-* options in --help output\n  - configure.ac: Call zlib zlib and not libz in text but keep option names\n  - Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro\n  - sftp: seek: Don't flush buffers on same offset\n  - sftp: statvfs: Along error path, reset the correct 'state' variable.\n  - sftp: Add support for fsync (OpenSSH extension).\n  - _libssh2_channel_read: fix data drop when out of window\n  - comp_method_zlib_decomp: Improve buffer growing algorithm\n  - _libssh2_channel_read: Honour window_size_initial\n  - window_size: redid window handling for flow control reasons\n  - knownhosts: handle unknown key types","status":"published","published":"2023-10-12T12:32:58Z","modified":"2026-02-04T04:36:25.421842Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2023:4192-1","title":"Recommended update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]\n\nUpdate to 1.11.0:\n\n  * Enhancements and bugfixes\n\n    - Adds support for encrypt-then-mac (ETM) MACs\n    - Adds support for AES-GCM crypto protocols\n    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys\n    - Adds support for RSA certificate authentication\n    - Adds FIDO support with *_sk() functions\n    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends\n    - Adds Agent Forwarding and libssh2_agent_sign()\n    - Adds support for Channel Signal message libssh2_channel_signal_ex()\n    - Adds support to get the user auth banner message libssh2_userauth_banner()\n    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,\n      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options\n    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()\n    - Adds wolfSSL support to CMake file\n    - Adds mbedTLS 3.x support\n    - Adds LibreSSL 3.5 support\n    - Adds support for CMake 'unity' builds\n    - Adds CMake support for building shared and static libs in a single pass\n    - Adds symbol hiding support to CMake\n    - Adds support for libssh2.rc for all build tools\n    - Adds .zip, .tar.xz and .tar.bz2 release tarballs\n    - Enables ed25519 key support for LibreSSL 3.7.0 or higher\n    - Improves OpenSSL 1.1 and 3 compatibility\n    - Now requires OpenSSL 1.0.2 or newer\n    - Now requires CMake 3.1 or newer\n    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs\n    - SFTP: No longer has a packet limit when reading a directory\n    - SFTP: now parses attribute extensions if they exist\n    - SFTP: no longer will busy loop if SFTP fails to initialize\n    - SFTP: now clear various errors as expected\n    - SFTP: no longer skips files if the line buffer is too small\n    - SCP: add option to not quote paths\n    - SCP: Enables 64-bit offset support unconditionally\n    - Now skips leading \\r and \\n characters in banner_receive()\n    - Enables secure memory zeroing with all build tools on all platforms\n    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive\n    - Speed up base64 encoding by 7x\n    - Assert if there is an attempt to write a value that is too large\n    - WinCNG: fix memory leak in _libssh2_dh_secret()\n    - Added protection against possible null pointer dereferences\n    - Agent now handles overly large comment lengths\n    - Now ensure KEX replies don't include extra bytes\n    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER\n    - Fixed possible buffer overflow in keyboard interactive code path\n    - Fixed overlapping memcpy()\n    - Fixed Windows UWP builds\n    - Fixed DLL import name\n    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows\n    - Support for building with gcc versions older than 8\n    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files\n    - Restores ANSI C89 compliance\n    - Enabled new compiler warnings and fixed/silenced them\n    - Improved error messages\n    - Now uses CIFuzz\n    - Numerous minor code improvements\n    - Improvements to CI builds\n    - Improvements to unit tests\n    - Improvements to doc files\n    - Improvements to example files\n    - Removed 'old gex' build option\n    - Removed no-encryption/no-mac builds\n    - Removed support for NetWare and Watcom wmake build files\n\n- Bump to version 1.10.0\n\n  * Enhancements and bugfixes:\n\n      * support ECDSA certificate authentication\n      * fix detailed _libssh2_error being overwritten by generic errors\n      * unified error handling\n      * fix _libssh2_random() silently discarding errors\n      * don't error if using keys without RSA\n      * avoid OpenSSL latent error in FIPS mode\n      * fix EVP_Cipher interface change in openssl 3\n      * fix potential overwrite of buffer when reading stdout of command\n      * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data\n      * correct a typo which may lead to stack overflow\n      * fix random big number generation to match openssl\n      * added key exchange group16-sha512 and group18-sha512.\n      * add support for an OSS Fuzzer fuzzing target\n      * adds support for ECDSA for both key exchange and host key algorithms\n      * clean up curve25519 code\n      * update the min, preferred and max DH group values based on RFC 8270.\n      * changed type of LIBSSH2_FX_* constants to unsigned long\n      * added diffie-hellman-group14-sha256 kex\n      * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression\n      * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.\n      * fixes crash with delayed compression option using Bitvise server.\n      * adds support for PKIX key reading\n      * use new API to parse data in packet_x11_open() for better bounds checking.\n      * double the static buffer size when reading and writing known hosts\n      * improved bounds checking in packet_queue_listener\n      * improve message parsing (CVE-2019-17498)\n      * improve bounds checking in kex_agree_methods()\n      * adding SSH agent forwarding.\n      * fix agent forwarding message, updated example.\n      * added integration test code and cmake target. Added example to cmake list.\n      * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.\n      * add an EWOULDBLOCK check for better portability\n      * fix off by one error when loading public keys with no id\n      * fix use-after-free crash on reinitialization of openssl backend\n      * preserve error info from agent_list_identities()\n      * make sure the error code is set in _libssh2_channel_open()\n      * fixed misspellings\n      * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`\n      * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type\n","status":"published","published":"2023-10-25T08:35:13Z","modified":"2026-02-04T03:41:18.335165Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:14206-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issue:\n\n- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).\n","status":"published","published":"2019-11-06T10:20:17Z","modified":"2025-05-02T04:09:02.663551Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:14226-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issue:\n\n- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).\n","status":"published","published":"2019-11-25T08:12:39Z","modified":"2026-02-04T04:24:32.541638Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2900-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issue:\n\n- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).\n","status":"published","published":"2019-11-06T10:20:58Z","modified":"2025-05-02T04:09:02.783192Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2900-2","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issue:\n\n- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).\n","status":"published","published":"2020-06-24T07:41:39Z","modified":"2026-02-04T04:01:38.723228Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2936-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issue:\n\n- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).\n","status":"published","published":"2019-11-08T12:20:53Z","modified":"2026-02-04T04:21:40.539245Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:3551-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n   Enhancements and bugfixes:\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header","status":"published","published":"2020-11-27T13:54:59Z","modified":"2026-02-04T03:38:56.083906Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-5308-1","title":"libssh2 vulnerabilities","description":"It was discovered that libssh2 mishandled certain input. If libssh2 were\nused to connect to a malicious or compromised SSH server, a remote,\nunauthenticated attacker could possibly execute arbitrary code on the client \nsystem. (CVE-2019-3855)\n\nIt was discovered that libssh2 incorrectly handled prompt requests. A\nremote attacker could possibly use this issue to execute arbitrary code.\n(CVE-2019-3856)\n\nIt was discovered that libssh2 incorrectly handled SSH_MSG_CHANNEL_REQUEST\npackets. A remote attacker could possibly use this issue to execute\narbitrary code, cause a denial of service, or obtain sensitive information. \n(CVE-2019-3857, CVE-2019-3862)\n\nIt was discovered that libssh2 incorrectly handled specially crafted SFTP\npackets. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-3858)\n\nIt was discovered that libssh2 incorrectly handled certain specially\ncrafted packets. A remote attacker could possibly use this issue to cause a\ndenial of service or obtain sensitive information. (CVE-2019-3859)\n\nIt was discovered that libssh2 incorrectly handled SFTP packets with empty\npayloads. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-3860)\n\nIt was discovered that libssh2 incorrectly handled padding values in SSH\npackets. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-3861)\n\nIt was discovered that libssh2 incorrectly handled interactive response\nmessages length. A remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2019-3863)\n\nIt was discovered that libssh2 incorrectly handled the Diffie Hellman key\nexchange. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-13115)\n\nIt was discovered that libssh2 incorrectly handled bound checks in\nSSH_MSG_DISCONNECT. A remote attacker could possibly use this issue to\ncause a denial of service or obtain sensitive information. (CVE-2019-17498)\n","status":"published","published":"2022-03-07T23:47:01Z","modified":"2026-06-25T13:31:02.300768211Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}