Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:0655-1

Опубликовано: 20 мар. 2019
Источник: suse-cvrf

Описание

Security update for libssh2_org

This update for libssh2_org fixes the following issues:

Security issues fixed:

  • CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490).
  • CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492).
  • CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481).
  • CVE-2019-3863: Fixed an Integer overflow in user authenticate keyboard interactive which could allow out-of-bounds writes with specially crafted keyboard responses (bsc#1128493).
  • CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write with specially crafted payload (bsc#1128472).
  • CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require and _libssh2_packet_requirev (bsc#1128480).
  • CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially crafted payload (bsc#1128471).
  • CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted SFTP packet (bsc#1128476).
  • CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially crafted message channel request SSH packet (bsc#1128474).

Other issue addressed:

  • Libbssh2 will stop using keys unsupported types in the known_hosts file (bsc#1091236).

Список пакетов

Container caasp/v4/nginx-ingress-controller:beta1
libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest
libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS
libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Desktop 12 SP3
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Desktop 12 SP4
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server 12 SP1-LTSS
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server 12 SP2-BCL
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server 12 SP2-LTSS
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server 12 SP3
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server 12 SP4
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server 12-LTSS
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libssh2-devel-1.4.3-20.3.1
SUSE Linux Enterprise Software Development Kit 12 SP4
libssh2-devel-1.4.3-20.3.1
SUSE OpenStack Cloud 7
libssh2-1-1.4.3-20.3.1
libssh2-1-32bit-1.4.3-20.3.1

Ссылки

Описание

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки

Описание

A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libssh2-1-1.4.3-20.3.1
Container suse/sles12sp3:latest:libssh2-1-1.4.3-20.3.1
Image SLES12-SP4-SAP-OCI-BYOS:libssh2-1-1.4.3-20.3.1
SUSE Enterprise Storage 4:libssh2-1-1.4.3-20.3.1
Ссылки
Уязвимость SUSE-SU-2019:0655-1