libssh2 -- multiple issuesentered 2019-04-18
no CVE referenced
CVE details
CVE-2019-3860
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/linux-c7-libssh2 | linux-c7-libssh2 | 1.8.0_2 | fixed | emulation@FreeBSD.org |