CVE-2019-17498

Опубликовано: 21 окт. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 5.8

EPSS Низкий

Описание

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html
https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/
Broken Link
https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498
Exploit
Third Party Advisory
https://github.com/libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c#L480
Exploit
Third Party Advisory
https://github.com/libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9c
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/11/msg00010.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB/
https://security.netapp.com/advisory/ntap-20220909-0004/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html
https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/
Broken Link
https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498
Exploit
Third Party Advisory
https://github.com/libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c#L480
Exploit
Third Party Advisory
https://github.com/libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9c
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/11/msg00010.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*

Версия до 1.9.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02198

Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2019-17498

CVSS3: 8.1

ubuntu

почти 6 лет назад

CVE-2019-17498

CVSS3: 6.5

redhat

почти 6 лет назад

CVE-2019-17498

CVSS3: 8.1

msrc

около 5 лет назад

Описание отсутствует

CVE-2019-17498

CVSS3: 8.1

debian

почти 6 лет назад

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic i ...

openSUSE-SU-2019:2483-1

suse-cvrf

почти 6 лет назад

Security update for libssh2_org

EPSS

Процентиль: 84%

0.02198

Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-190