Out-of-bounds read in libssh2 - CVE-2019-3862

Detailed vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information or perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker can trick the victim to connect to a malicious SSH server, trigger out of bounds read and gain access to sensitive information or perform denial of service attack.

How to mitigate CVE-2019-3862

Sources

• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767
• https://www.libssh2.org/CVE-2019-3862.html