Home > Vulnerability Database > CVE-2019-3863

Mend.io Vulnerability Database

CVE-2019-3863

Date: March 25, 2019

A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.

Language: C#

Severity Score

8.8

Related Resources (23)

Url: https://access.redhat.com/errata/RHSA-2019:2399

Url: https://security.netapp.com/advisory/ntap-20190327-0005/

Url: https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Url: https://access.redhat.com/errata/RHSA-2019:1175

Url: https://access.redhat.com/errata/RHSA-2019:1791

Url: https://security-tracker.debian.org/tracker/CVE-2019-3863

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-3863

Url: https://access.redhat.com/errata/RHSA-2019:1652

Url: https://security.alpinelinux.org/vuln/CVE-2019-3863

Url: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html

Url: https://www.libssh2.org/CVE-2019-3863.html

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/

Url: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863

Url: https://seclists.org/bugtraq/2019/Apr/25

Url: https://www.debian.org/security/2019/dsa-4431

Url: https://access.redhat.com/security/cve/CVE-2019-3863

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/

Url: https://access.redhat.com/errata/RHSA-2019:0679

Url: https://access.redhat.com/errata/RHSA-2019:1943

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2019-3863

Url: https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html

Url: https://www.mend.io/vulnerability-database/CVE-2019-3863

Severity Score

8.8

Weakness Type (CWE)

Integer Overflow or Wraparound

CWE-190

Out-of-bounds Write

CWE-787

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2019-3863

Date: March 25, 2019

Language: C#

Severity Score

Related Resources (23)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?