Out of Bounds Read Flaw Affecting libssh2 by libssh2

CVE-2019-3861

What is CVE-2019-3861?

An out of bounds read vulnerability exists in the way SSH packets are processed in libssh2 versions prior to 1.8.1. When SSH packets include a padding length value exceeding the actual packet length, this flaw can be exploited by a remote attacker who has compromised an SSH server. This could lead to Denial of Service attacks or allow unauthorized access to sensitive data within the client’s memory. It is essential for users and administrators to apply patches to mitigate the risks associated with this vulnerability.

References