QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-3859

Back to search

CVE-2019-3859

Published: Mar 20, 2019

Modified: Dec 18, 2025

PUBLISHED

CVSS v3.0

5.0

MEDIUM

Description

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

VendorProductVersions

The libssh2 Project

libssh2

affected
1.8.1

Weaknesses (CWE)

CWE-125

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

References

107485
vdb-entry
x_refsource_BID
FEDORA-2019-f31c14682f
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2019:1075
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:1109
vendor-advisory
x_refsource_SUSE
FEDORA-2019-3348cb4934
vendor-advisory
x_refsource_FEDORA
DSA-4431
vendor-advisory
x_refsource_DEBIAN
openSUSE-SU-2019:1290
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:1291
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now