CVE-2019-3856
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.
Published Mar 25, 2019 · updated Oct 14, 2026 · libssh2 libssh2
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Timeline
Detection, updates, and resolution for this record.
Mar 25, 2019 · NIST NVD
Detected
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Oct 14, 2026 · NIST NVD
Updated
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Affected
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora28
- cpe libssh2/libssh2version unspecified
- cpe netapp/ontap select deploy administration utilityversion unspecified
- cpe opensuse/leap15.0
- cpe opensuse/leap42.3
- cpe oracle/peoplesoft enterprise peopletools8.56
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux desktop7.0
Sources
- NIST NVDCVE-2019-3856
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the
nvd.nist.gov