The Libssh2 Project - vulnerabilities (CVEs)
9 CVEs in 1 products, 0 in the last 30 days, newest from 2019-03-25.
Products
- Libssh2 - 9 CVEs
Newest CVEs of The Libssh2 Project
- CVE-2019-3857 - CVSS 8.8 (high), 2019-03-25: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an…
- CVE-2019-3856 - CVSS 8.8 (high), 2019-03-25: An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A…
- CVE-2019-3861 - CVSS 9.1 (critical), 2019-03-25: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are…
- CVE-2019-3860 - CVSS 9.1 (critical), 2019-03-25: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a…
- CVE-2019-3863 - CVSS 8.8 (high), 2019-03-25: A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response…
- CVE-2019-3858 - CVSS 9.1 (critical), 2019-03-21: An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who…
- CVE-2019-3855 - CVSS 8.8 (high), 2019-03-21: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A…
- CVE-2019-3859 - CVSS 9.1 (critical), 2019-03-21: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who…
- CVE-2019-3862 - CVSS 9.1 (critical), 2019-03-21: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are…
