Out of Bounds Read Vulnerability in libssh2 Affects SSH Servers

CVE-2019-3860

What is CVE-2019-3860?

An out of bounds read flaw in libssh2, present in versions prior to 1.8.1, may lead to significant security risks. This vulnerability occurs during the parsing of SFTP packets that have empty payloads, allowing remote attackers who gain access to an SSH server to potentially exploit the flaw. Successful exploitation could result in a Denial of Service condition or unauthorized access to sensitive information stored in client memory. It is crucial for users and administrators to update to newer versions to safeguard against such possible attacks.

References