The libssh2 Project libssh2
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-3856 | 1.8.1 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requ | HIGH 8.8 | 6.1 % | ||
| CVE-2019-3857 | 1.8.1 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUES | HIGH 8.8 | 6.1 % | ||
| CVE-2019-3860 | 1.8.1 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker | CRITICAL 9.1 | 5.4 % | ||
| CVE-2019-3861 | 1.8.1 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet | CRITICAL 9.1 | 5.1 % | ||
| CVE-2019-3863 | 1.8.1 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactiv | HIGH 8.8 | 3.4 % | ||
| CVE-2019-3858 | 1.8.1 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote | CRITICAL 9.1 | 6.4 % | ||
| CVE-2019-3855 | 1.8.1 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from | HIGH 8.8 | 9.3 % | ||
| CVE-2019-3862 | 1.8.1 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and | CRITICAL 9.1 | 7.9 % | ||
| CVE-2019-3859 | 1.8.1 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A r | CRITICAL 9.1 | 6.3 % |