libssh2 -- multiple issuesentered 2019-04-18
no CVE referenced
CVE details
CVE-2019-3862
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
- Score
- 7.3 high
- Published
- 2019-03-21
- Links
- NVD · cve.org · Report wrong data
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/linux-c7-libssh2 | linux-c7-libssh2 | 1.8.0_2 | fixed | emulation@FreeBSD.org |