libssh2 -- multiple issuesentered 2019-04-18
no CVE referenced
CVE details
CVE-2019-3857
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
- Score
- 8.8 high
- Published
- 2019-03-25
- Links
- NVD · cve.org · Report wrong data
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/linux-c7-libssh2 | linux-c7-libssh2 | 1.8.0_2 | fixed | emulation@FreeBSD.org |