{"id":"CVE-2019-3863","aliases":["ALPINE-CVE-2019-3863","BELL-CVE-2019-3863","CLSA-2026-1776864708","DEBIAN-CVE-2019-3863","DLA-1730-1","DSA-4431-1","EUVD-2019-13477","GHSA-h63q-2463-x5hq","MGASA-2019-0139","RHSA-2019:0679","RHSA-2019:1175","RHSA-2019:1652","RHSA-2019:1791","RHSA-2019:1943","RHSA-2019:2399","SUSE-SU-2019:0655-1","SUSE-SU-2019:13982-1","SUSE-SU-2019:13997-1","SUSE-SU-2020:3551-1","UBUNTU-CVE-2019-3863","USN-5308-1","openSUSE-SU-2019:1109-1","openSUSE-SU-2020:2126-1","openSUSE-SU-2020:2129-1","openSUSE-SU-2024:10999-1"],"status":"published","title":"A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.03437,"percentile":0.89049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-787"],"published":"2019-03-19T10:42:39Z","modified":"2026-10-24T14:47:26Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libssh2","fixed_in":["1.8.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libssh2","fixed_in":["1.8.0-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libssh2","fixed_in":["1.8.0-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libssh2","fixed_in":["1.8.0-2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","fixed_in":["1.4.3-2ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","fixed_in":["1.5.0-2ubuntu0.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-4.1+deb8u2"}]}],"versions":["1.4.3-4.1","1.4.3-4.1+deb8u1"],"bundled":9},{"source":"osv","ecosystem":"Debian:9","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1+deb9u1"}]}],"versions":["1.7.0-1"],"bundled":9},{"source":"osv","ecosystem":"Mageia:6","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-2.1.mga6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-12.el7_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"SLOF","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hivex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hivex-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-benchmarking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-benchmarking-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-gfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-gobject-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-inspect-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-man-pages-ja","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-man-pages-uk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-tools-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-winsupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0-2.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libguestfs-xfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libiscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libiscsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libiscsi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libiscsi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libiscsi-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libiscsi-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-7.module+el8.0.0+3075+09be6b65.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-7.module+el8.0.0+3075+09be6b65.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libssh2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-7.module+el8.0.0+3075+09be6b65.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-admin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-network-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-nodedev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-nwfilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-qemu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-secret-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-disk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-gluster-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-iscsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-logical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-logical-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-mpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-mpath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-scsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-driver-storage-scsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-lock-sanlock-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"lua-guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"lua-guestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-basic-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-basic-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-example-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-example-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-gzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-gzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-python-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-python3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-vddk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-vddk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-xz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nbdkit-plugin-xz-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netcf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netcf-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-Sys-Guestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-Sys-Virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-Sys-Virt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-Sys-Virt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-4.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-1.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-guest-agent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-img-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-gluster-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-iscsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-block-ssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qemu-kvm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-6.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"seabios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-3.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"seabios-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-3.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"seavgabios-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-3.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"sgabios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.20170427git-2.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"sgabios-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.20170427git-2.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"supermin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-8.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"supermin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-8.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"supermin-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-8.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"supermin-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-8.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"virt-dib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"virt-dib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"virt-p2v-maker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"virt-v2v","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"virt-v2v-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.4-10.module+el8.0.0+3075+09be6b65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-3.el6_10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-11.el7_3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-20.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-17.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-17.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-17.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-4.2.12.5.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.13.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2ubuntu0.2+esm2"}]}],"versions":["1.4.3-1","1.4.3-2","1.4.3-2ubuntu0.1","1.4.3-2ubuntu0.2","1.4.3-2ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+esm1"}]}],"versions":["1.5.0-2","1.5.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.0-1","1.8.0-1ubuntu0.1","1.8.0-1ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+esm1"}]}],"versions":["1.5.0-2","1.5.0-2ubuntu0.1"],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-lp150.3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-lp151.6.6.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-lp152.8.3.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-3.6"}]}],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"libssh2","product":"libssh2"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"the libssh2 project","product":"libssh2"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://www.libssh2.org/CVE-2019-3863.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190327-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0679","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2019/dsa-4431","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Apr/25","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1175","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1652","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1791","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1943","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2399","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3863","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O"},{"url":"https://security.netapp.com/advisory/ntap-20190327-0005"},{"url":"https://github.com/advisories/GHSA-h63q-2463-x5hq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-3863","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-3863","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1776864708.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3863","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0139.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24532","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2019/03/18/3","tags":["web"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2019-March/005203.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687313","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0679.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3855","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3855","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3855","tags":["advisory"]},{"url":"https://www.libssh2.org/CVE-2019-3855.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3856","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3856","tags":["advisory"]},{"url":"https://www.libssh2.org/CVE-2019-3856.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3857","tags":["advisory"]},{"url":"https://www.libssh2.org/CVE-2019-3857.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3863","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3863","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705312","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1175.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12126","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/mds","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12126","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20815","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20815","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11091","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1652.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1791.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1943.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2399.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190655-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1091236","tags":["report"]},{"url":"https://bugzilla.suse.com/1128471","tags":["report"]},{"url":"https://bugzilla.suse.com/1128472","tags":["report"]},{"url":"https://bugzilla.suse.com/1128474","tags":["report"]},{"url":"https://bugzilla.suse.com/1128476","tags":["report"]},{"url":"https://bugzilla.suse.com/1128480","tags":["report"]},{"url":"https://bugzilla.suse.com/1128481","tags":["report"]},{"url":"https://bugzilla.suse.com/1128490","tags":["report"]},{"url":"https://bugzilla.suse.com/1128492","tags":["report"]},{"url":"https://bugzilla.suse.com/1128493","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3863","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913982-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913997-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203551-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1130103","tags":["report"]},{"url":"https://bugzilla.suse.com/1178083","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17498","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-3863","tags":["report"]},{"url":"https://github.com/libssh2/libssh2/pull/315","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5308-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-3855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17498","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZD25U3ME4BCNPHHDUMEWX4A2M5KJM34P/#ZD25U3ME4BCNPHHDUMEWX4A2M5KJM34P","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VZ5CXNJKJVQFPMHVDXDS6F67TKZ3TJ7E/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HAQH2P56QS5PVJGYRATVMCCAWSF5JABQ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T17:52:10Z","modified":"2026-10-14T06:35:34.23Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13477","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T17:52:10Z","modified":"2026-10-14T06:35:34Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-h63q-2463-x5hq","title":"A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...","description":"A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2022-05-14T01:02:41Z","modified":"2026-10-14T09:32:24Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T15:13:23.530725Z"}],"nvd":[{"id":"CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T18:29:01.59Z","modified":"2026-10-14T07:16:53.397Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"ALPINE-CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T18:29:01.59Z","modified":"2026-09-21T06:17:52.521249647Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2019-3863","title":"CVE-2019-3863 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:59.448254Z","modified":"2026-01-26T09:46:59.45457Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T18:29:01.59Z","modified":"2026-10-24T14:47:26.75532202Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T18:29:01.59Z","modified":"2026-10-15T07:47:31.407243194Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2019:0679","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-13T14:08:41Z","modified":"2026-10-14T10:01:09Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1175","title":"Red Hat Security Advisory: virt:rhel security update","status":"published","published":"2024-09-13T19:50:53Z","modified":"2026-10-14T10:01:10Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1652","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-13T14:09:22Z","modified":"2026-10-14T10:01:11Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:1791","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-13T14:09:16Z","modified":"2026-10-14T10:01:12Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:1943","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-13T14:09:39Z","modified":"2026-10-14T10:01:13Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2399","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-13T14:09:55Z","modified":"2026-10-14T10:01:15Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","status":"published","published":"2019-03-25T18:29:00Z","modified":"2026-09-22T15:33:10.079308692Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"CLSA-2026-1776864708","title":"Fix CVE(s): CVE-2019-13115, CVE-2019-3855, CVE-2019-3856, CVE-2019-3863","description":"   * SECURITY UPDATE: integer overflow in transport read allowing\n     out-of-bounds write via crafted SSH packet\n     - debian/patches/CVE-2019-3855.patch: add packet_length bounds\n       check against LIBSSH2_PACKET_MAXPAYLOAD in transport read\n     - CVE-2019-3855\n   * SECURITY UPDATE: integer overflow in keyboard-interactive handling\n     allowing out-of-bounds write via crafted num-prompts value\n     - debian/patches/CVE-2019-3856.patch: cap num_prompts at 100 to\n       prevent excessive allocation in keyboard-interactive auth\n     - CVE-2019-3856\n   * SECURITY UPDATE: integer overflow in keyboard-interactive response\n     allowing out-of-bounds write via crafted response lengths\n     - debian/patches/CVE-2019-3863.patch: add SIZE_MAX overflow check\n       in keyboard-interactive response packet length calculation\n     - CVE-2019-3863\n   * SECURITY UPDATE: out-of-bounds memory access in kex exchange when\n     reading malformed data in diffie_hellman_sha1/sha256\n     - debian/patches/CVE-2019-13115.patch: add _libssh2_copy_string()\n       bounds-checked helper and use it in kex DH group exchange\n     - CVE-2019-13115","status":"published","published":"2026-04-22T13:31:52Z","modified":"2026-06-04T10:03:53.59233Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-1730-1","title":"libssh2 - security update","status":"published","published":"2019-03-26T00:00:00Z","modified":"2026-03-09T01:23:24.48404Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4431-1","title":"libssh2 - security update","status":"published","published":"2019-04-13T00:00:00Z","modified":"2026-03-09T02:10:19.180533Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0139","title":"Updated libssh2 packages fix security vulnerability","description":"Possible integer overflow in transport read allows out-of-bounds write.\n(CVE-2019-3855)\n\nPossible integer overflow in keyboard interactive handling allows\nout-of-bounds write. (CVE-2019-3856)\n\nPossible integer overflow leading to zero-byte allocation and\nout-of-bounds write. (CVE-2019-3857)\n\nPossible zero-byte allocation leading to an out-of-bounds read.\n(CVE-2019-3858)\n\nOut-of-bounds reads with specially crafted payloads due to unchecked use\nof `_libssh2_packet_require` and `_libssh2_packet_requirev`.\n(CVE-2019-3859)\n\nOut-of-bounds reads with specially crafted SFTP packets. (CVE-2019-3860)\n\nOut-of-bounds reads with specially crafted SSH packets. (CVE-2019-3861)\n\nOut-of-bounds memory comparison. (CVE-2019-3862)\n\nInteger overflow in user authenicate keyboard interactive allows\nout-of-bounds writes. (CVE-2019-3863)\n","status":"published","published":"2019-04-10T21:25:19Z","modified":"2026-04-16T04:42:03.24286907Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1109-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\nSecurity issues fixed:\t  \n\n- CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490).\n- CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492).\n- CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481).\n- CVE-2019-3863: Fixed an Integer overflow in user authenicate keyboard interactive which could allow out-of-bounds writes \n  with specially crafted keyboard responses (bsc#1128493).\n- CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write \n  with specially crafted payload (bsc#1128472).\n- CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require \n  and _libssh2_packet_requirev (bsc#1128480).\n- CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially \n  crafted payload (bsc#1128471).\n- CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted \n  SFTP packet (bsc#1128476).\n- CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially \n  crafted message channel request SSH packet (bsc#1128474).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-02T11:02:26Z","modified":"2026-02-04T02:46:33.75176Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2020:2126-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n   Enhancements and bugfixes:\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-30T17:52:05Z","modified":"2026-02-04T02:58:48.243425Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2129-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n   Enhancements and bugfixes:\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-12-01T05:25:38Z","modified":"2026-02-04T04:03:11.670285Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10999-1","title":"libssh2-1-1.9.0-3.6 on GA media","description":"These are all security issues fixed in the libssh2-1-1.9.0-3.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:25.476973Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0655-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490).\n- CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492).\n- CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481).\n- CVE-2019-3863: Fixed an Integer overflow in user authenticate keyboard interactive which could allow out-of-bounds writes \n  with specially crafted keyboard responses (bsc#1128493).\n- CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write \n  with specially crafted payload (bsc#1128472).\n- CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require \n  and _libssh2_packet_requirev (bsc#1128480).\n- CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially \n  crafted payload (bsc#1128471).\n- CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted \n  SFTP packet (bsc#1128476).\n- CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially \n  crafted message channel request SSH packet (bsc#1128474).\n\nOther issue addressed: \n\n- Libbssh2 will stop using keys unsupported types in the known_hosts file (bsc#1091236).\n ","status":"published","published":"2019-03-20T09:31:34Z","modified":"2026-02-04T03:46:05.217375Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:13982-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\nSecurity issues fixed:\t  \n\n- CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490).\n- CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492).\n- CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481).\n- CVE-2019-3863: Fixed an Integer overflow in user authenicate keyboard interactive which could allow out-of-bounds writes \n  with specially crafted keyboard responses (bsc#1128493).\n- CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write \n  with specially crafted payload (bsc#1128472).\n- CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require \n  and _libssh2_packet_requirev (bsc#1128480).\n- CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially \n  crafted payload (bsc#1128471).\n- CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted \n  SFTP packet (bsc#1128476).\n- CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially \n  crafted message channel request SSH packet (bsc#1128474).\t  \n","status":"published","published":"2019-03-19T10:42:39Z","modified":"2026-02-04T04:10:40.356725Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:13997-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\nSecurity issues fixed:\t  \n\n- CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490).\n- CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492).\n- CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481).\n- CVE-2019-3863: Fixed an Integer overflow in user authenticate keyboard interactive which could allow out-of-bounds writes \n  with specially crafted keyboard responses (bsc#1128493).\n- CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write \n  with specially crafted payload (bsc#1128472).\n- CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require \n  and _libssh2_packet_requirev (bsc#1128480).\n- CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially \n  crafted payload (bsc#1128471).\n- CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted \n  SFTP packet (bsc#1128476).\n- CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially \n  crafted message channel request SSH packet (bsc#1128474).\n\nOther issue addressed:   \n\n- Fixed an issue where libssh2 stops parsing known_hosts (bsc#1091236).\n","status":"published","published":"2019-03-29T15:32:12Z","modified":"2026-02-04T02:42:03.058874Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2020:3551-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]\n   Enhancements and bugfixes:\n    * adds ECDSA keys and host key support when using OpenSSL\n    * adds ED25519 key and host key support when using OpenSSL 1.1.1\n    * adds OpenSSH style key file reading\n    * adds AES CTR mode support when using WinCNG\n    * adds PEM passphrase protected file support for Libgcrypt and WinCNG\n    * adds SHA256 hostkey fingerprint\n    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()\n    * adds explicit zeroing of sensitive data in memory\n    * adds additional bounds checks to network buffer reads\n    * adds the ability to use the server default permissions when creating sftp directories\n    * adds support for building with OpenSSL no engine flag\n    * adds support for building with LibreSSL\n    * increased sftp packet size to 256k\n    * fixed oversized packet handling in sftp\n    * fixed building with OpenSSL 1.1\n    * fixed a possible crash if sftp stat gets an unexpected response\n    * fixed incorrect parsing of the KEX preference string value\n    * fixed conditional RSA and AES-CTR support\n    * fixed a small memory leak during the key exchange process\n    * fixed a possible memory leak of the ssh banner string\n    * fixed various small memory leaks in the backends\n    * fixed possible out of bounds read when parsing public keys from the server\n    * fixed possible out of bounds read when parsing invalid PEM files\n    * no longer null terminates the scp remote exec command\n    * now handle errors when diffie hellman key pair generation fails\n    * improved building instructions\n    * improved unit tests\n\n- Version update to 1.8.2: [bsc#1130103]\n   Bug fixes:\n    * Fixed the misapplied userauth patch that broke 1.8.1\n    * moved the MAX size declarations from the public header","status":"published","published":"2020-11-27T13:54:59Z","modified":"2026-02-04T03:38:56.083906Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-5308-1","title":"libssh2 vulnerabilities","description":"It was discovered that libssh2 mishandled certain input. If libssh2 were\nused to connect to a malicious or compromised SSH server, a remote,\nunauthenticated attacker could possibly execute arbitrary code on the client \nsystem. (CVE-2019-3855)\n\nIt was discovered that libssh2 incorrectly handled prompt requests. A\nremote attacker could possibly use this issue to execute arbitrary code.\n(CVE-2019-3856)\n\nIt was discovered that libssh2 incorrectly handled SSH_MSG_CHANNEL_REQUEST\npackets. A remote attacker could possibly use this issue to execute\narbitrary code, cause a denial of service, or obtain sensitive information. \n(CVE-2019-3857, CVE-2019-3862)\n\nIt was discovered that libssh2 incorrectly handled specially crafted SFTP\npackets. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-3858)\n\nIt was discovered that libssh2 incorrectly handled certain specially\ncrafted packets. A remote attacker could possibly use this issue to cause a\ndenial of service or obtain sensitive information. (CVE-2019-3859)\n\nIt was discovered that libssh2 incorrectly handled SFTP packets with empty\npayloads. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-3860)\n\nIt was discovered that libssh2 incorrectly handled padding values in SSH\npackets. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-3861)\n\nIt was discovered that libssh2 incorrectly handled interactive response\nmessages length. A remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2019-3863)\n\nIt was discovered that libssh2 incorrectly handled the Diffie Hellman key\nexchange. A remote attacker could possibly use this issue to cause a denial\nof service or obtain sensitive information. (CVE-2019-13115)\n\nIt was discovered that libssh2 incorrectly handled bound checks in\nSSH_MSG_DISCONNECT. A remote attacker could possibly use this issue to\ncause a denial of service or obtain sensitive information. (CVE-2019-17498)\n","status":"published","published":"2022-03-07T23:47:01Z","modified":"2026-06-25T13:31:02.300768211Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}