VDB
BDU%3A2021-06331
BDU%3A2021-06331
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость функции userauth_keyboard_interactive() в компоненте userauth.c библиотеки libssh2, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Novell Inc., Fedora Project, Oracle Corp., NetApp Inc. | Red Hat Enterprise Linux, Debian GNU/Linux, OpenSUSE Leap, Fedora, PeopleSoft Enterprise PeopleTools, libssh2, ONTAP Select Deploy |
Timeline
- Dec 24, 2021 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://www.libssh2.org/CVE-2019-3856.html url
- https://access.redhat.com/security/cve/CVE-2019-3856 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ url
- https://www.debian.org/security/2019/dsa-4431 url
- https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html url
- https://www.oracle.com/security-alerts/cpuoct2019.html url
- https://security.netapp.com/advisory/ntap-20190327-0005/ url
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZD25U3ME4BCNPHHDUMEWX4A2M5KJM34P/ url
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RT3KLE6OCATVJTFMDJJYTQWCFMJMLES6/ url