CVE-2019-13115

Published: Jul 16, 2019Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.

Affected (9)

Products: Libssh2: Libssh2 · Debian: Debian Linux · Fedoraproject: Fedora · +2 more

Show all products

Libssh2: Libssh2 · Debian: Debian Linux · Fedoraproject: Fedora · Netapp: Cloud Backup, E Series Santricity Os Controller, Ontap Select Deploy Administration Utility · F5: Traffix Systems Signaling Delivery Controller

1 product

1 product

1 product

3 products

E Series Santricity Os Controller

Ontap Select Deploy Administration Utility

1 product

Traffix Systems Signaling Delivery Controller

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libssh2 Libssh2	Before 1.9.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 29
Fedoraproject Fedora	Version 30

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp E Series Santricity Os Controller	From 11.0.0 to 11.70.1
Netapp Ontap Select Deploy Administration Utility	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
F5 Traffix Systems Signaling Delivery Controller	From 5.0.0 to 5.1.0

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (30)

http://packetstormsecurity.com/files/172834/libssh2-1.8.2-Out-Of-Bounds-Read.html

Source: cve@mitre.org

https://blog.semmle.com/libssh2-integer-overflow/

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa

Source: cve@mitre.org

Third Party Advisory

https://github.com/libssh2/libssh2/pull/350

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://libssh2.org/changes.html

Source: cve@mitre.org

Release NotesVendor Advisory

https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20190806-0002/

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K13322484

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K13322484?utm_source=f5support&amp%3Butm_medium=RSS

Source: cve@mitre.org

http://packetstormsecurity.com/files/172834/libssh2-1.8.2-Out-Of-Bounds-Read.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://blog.semmle.com/libssh2-integer-overflow/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/libssh2/libssh2/pull/350

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://libssh2.org/changes.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20190806-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K13322484

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K13322484?utm_source=f5support&amp%3Butm_medium=RSS

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.