SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-3855

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.

HIGH 8.8EPSS 9.29%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (9.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

CVSS 3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
9.29% probability · 95th percentile
CISA KEV
Not listed
Weakness
CWE-190, CWE-787
Affected
libssh2/libssh2 · fedoraproject/fedora · debian/debian linux · netapp/ontap select deploy administration utility · redhat/enterprise linux · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · opensuse/leap · apple/xcode · oracle/peoplesoft enterprise peopletools
Source
secalert@redhat.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.