Out-of-bounds read in libssh2 - CVE-2019-3859

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU18027

Out-of-bounds read in libssh2 - CVE-2019-3859

Published: March 20, 2019


Vulnerability identifier: #VU18027
CSH Severity: Medium
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-3859
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when processing packets in _libssh2_packet_require() and _libssh2_packet_requirev() functions. A remote attacker can trick the victim to connect to a malicious SSH server, trigger out-of-bounds read error and read contents of memory or crash the affected application.


Affected software

libssh2
Arch Linux
Amazon Linux AMI
FortiOS
Slackware Linux
Opensuse
Fedora
libssh2 (Alpine package)
libssh2 (Debian package)
libssh2
IBM Tivoli Storage Manager
BIG-IP AFM
Flex System Chassis Management Module (CMM)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
Dell PowerProtect Cyber Recovery

How to mitigate CVE-2019-3859

Install updates from vendor's website.

libssh2 - update to 1.8.1
libssh2 (Alpine package) - update to 1.8.1-r0
libssh2 (Debian package) - update to 1.7.0-1+deb9u1
FortiOS - addressed in versions 5.6.11, 6.0.7, 6.2.1
libssh2 - update to 1.4.2-3.13
libssh2 - addressed in versions 1.8.1-1.fc28, 1.8.1-1.fc29, 1.8.2-1.fc30
Flex System Chassis Management Module (CMM) - update to 2pet18c-2.5.16c
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116
Dell PowerProtect Cyber Recovery - update to 18.1.1.2-8

External References

Related Security Bulletins