CVE-2019-3859CWE-125

CVE-2019-3859

Critical · published March 21, 2019

CVSS v3.1
9.1
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ An out of bounds read in libssh2 could let a crafty attacker force your server to misbehave or peek into sensitive client memory! Think of it like a restaurant kitchen where a chef accidentally serves a dish meant for someone else — you might get a weird combo instead or even an empty plate! Here, the SSH server could get confused, leading to downtime or unauthorized data access. If an attacker manages to exploit this flaw, they could cause a Denial of Service situation, effectively knocking services offline or potentially exposing sensitive information from memory. It’s a window of opportunity for mischief with your data!

Put simply

Think of it like a restaurant kitchen where a chef accidentally serves a dish meant for someone else — you might get a weird combo instead or even an empty plate! Here, the SSH server could get confused, leading to downtime or unauthorized data access. This vulnerability arises from out of bounds reads in the _libssh2_packet_require and _libssh2_packet_requirev functions, allowing attackers to access memory they shouldn't. In simpler terms, it’s like reading someone else's secret diary by mistake.

What to do

If an attacker manages to exploit this flaw, they could cause a Denial of Service situation, effectively knocking services offline or potentially exposing sensitive information from memory. It’s a window of opportunity for mischief with your data! Upgrade libssh2 to version 1.8.1 or later immediately to mitigate this issue. Additionally, check your server configurations and harden your SSH setup to minimize exposure to potential attacks. You've got this! Follow these steps and secure your SSH environment with confidence. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.06275 · 93.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2019-03-21T20:01Z
Affected products (8)
ProductVersionsFixed in
libssh2/libssh2< 1.8.11.8.1
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
netapp/ontap_select_deploy_administration_utilityall versions—
opensuse/leapall versions—
opensuse/leapall versions—
References (41)
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html · [email protected]http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html · [email protected]http://www.openwall.com/lists/oss-security/2019/03/18/3 · [email protected]http://www.securityfocus.com/bid/107485 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3859 · [email protected]https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html · [email protected]https://lists.debian.org/debian-lts-announce/2019/04/msg00006.html · [email protected]https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ · [email protected]https://seclists.org/bugtraq/2019/Apr/25 · [email protected]https://seclists.org/bugtraq/2019/Mar/25 · [email protected]https://security.netapp.com/advisory/ntap-20190327-0005/ · [email protected]https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767 · [email protected]https://www.debian.org/security/2019/dsa-4431 · [email protected]https://www.libssh2.org/CVE-2019-3859.html · [email protected]https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html · af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2019/03/18/3 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/107485 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3859 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/04/msg00006.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ · af854a3a-2127-422b-91ae-364da2661108https://seclists.org/bugtraq/2019/Apr/25 · af854a3a-2127-422b-91ae-364da2661108https://seclists.org/bugtraq/2019/Mar/25 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20190327-0005/ · af854a3a-2127-422b-91ae-364da2661108https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2019/dsa-4431 · af854a3a-2127-422b-91ae-364da2661108https://www.libssh2.org/CVE-2019-3859.html · af854a3a-2127-422b-91ae-364da2661108https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 20 MAR 21:18Z
    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions
    cvelistv5