Vulnerabilitymedium

Libssh Releases Update to Patch 9 New Security Vulnerabilities

The Hacker Newsby @TheHackersNewsMar 19, 2019 · 10:27 UTC (Mar 19, 2019)2 min read2

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863

Tags: cve-2019-3855 cve-2019-3856 cve-2019-3857 cve-2019-3858 cve-2019-3859 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-3862 +3 related CVEs CVE-2019-3858 CVE-2019-3859 CVE-2019-3855	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are…	9.1 group max	8%		Mar 21, 2019
CVE-2019-3860 +4 related CVEs CVE-2019-3861 CVE-2019-3857 CVE-2019-3856 CVE-2019-3863	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed	9.1 group max	5%		Mar 25, 2019

From the original article

2 min read at thehackernews.com

Libssh2, a popular open source client-side C library implementing the SSHv2 protocol, has released the latest version of its software to patch a total of nine security vulnerabilities. The Libssh2 library is available for all major distributors of the Linux operating systems, including Ubuntu, Red Hat, Debian, and also comes bundled within some distributions and software as a default library.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.