Integer Overflow Vulnerability in libssh2 Affects Multiple Vendors

CVE-2019-3856

What is CVE-2019-3856?

An integer overflow vulnerability in libssh2 allows a remote attacker to create malicious keyboard prompts that, when handled by a client, can result in an out-of-bounds write. This could lead to arbitrary code execution on the client’s system. Users connecting to compromised SSH servers are particularly at risk, necessitating immediate updates to versions earlier than 1.8.1 to mitigate potential exploitation.

References