CVE-2019-3855: Integer Overflow
A malicious server could send a specially crafted packet which could result in an unchecked integer overflow. The value would then be used to allocate memory causing a possible memory write out of bounds error.
Other sources
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
IDE SCM. Multiple issues were addressed by updating to version 2.16.
Credit
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-3855?
CVE-2019-3855 is an integer overflow flaw in libssh2 before version 1.8.1.
How severe is CVE-2019-3855?
CVE-2019-3855 has a severity rating of 8.8, which is classified as critical.
What is the impact of CVE-2019-3855?
CVE-2019-3855 could lead to an out-of-bounds write and allow a remote attacker to execute code when a user connects to a compromised SSH server.
Which software versions are affected by CVE-2019-3855?
The affected software includes libssh2 versions before 1.8.1, Xcode before version 11.0, and various versions of Debian, Fedora, Redhat, and other products.
How can I fix CVE-2019-3855?
To fix CVE-2019-3855, update libssh2 to version 1.8.1 or later, and ensure you are using the latest versions of other affected software.