ALINUX2-SA-2019%3A0048

ALINUX2-SA-2019%3A0048 PUBLISHED CVSS 7.300000190734863 HIGH

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-3862: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Risk Scores

CVSS 3.0

7.300000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
Alibaba Cloud	libssh2

Timeline

Aug 5, 2019 CVE Published
Aug 5, 2019 CVE Updated

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3862 advisory
ALINUX2-SA-2019:0048: libssh2 security update (Moderate) advisory

Open in Interactive Console →