CVE-2019-3855
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.
Published Mar 21, 2019 · updated Oct 14, 2026 · libssh2 libssh2
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Timeline
Detection, updates, and resolution for this record.
Mar 21, 2019 · NIST NVD
Detected
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Oct 14, 2026 · NIST NVD
Updated
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Affected
- cpe apple/xcodeversion unspecified
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora28
- cpe fedoraproject/fedora29
- cpe fedoraproject/fedora30
- cpe libssh2/libssh2version unspecified
- cpe netapp/ontap select deploy administration utilityversion unspecified
- cpe opensuse/leap42.3
- cpe oracle/peoplesoft enterprise peopletools8.56
- cpe redhat/enterprise linux8.0
Sources
- NIST NVDCVE-2019-3855
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the serv
nvd.nist.gov