CVE-2019-17498
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…
Published Oct 21, 2019 · updated Oct 14, 2026 · libssh2 libssh2
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Timeline
Detection, updates, and resolution for this record.
Oct 21, 2019 · NIST NVD
Detected
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Oct 14, 2026 · NIST NVD
Updated
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Affected
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora30
- cpe fedoraproject/fedora31
- cpe libssh2/libssh2version unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/bootstrap osversion unspecified
- cpe netapp/element softwareversion unspecified
- cpe opensuse/leap15.1
Sources
- CVE.orgCVE-2019-17498
Official CVE identifier
cve.org - NIST NVDCVE-2019-17498
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive inf
nvd.nist.gov