2019-03-25 19:29:01 2019-05-14 23:29:04

A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Netapp Ontap select deploy administration utility - (not an official CPE) Libssh2 Libssh2 1.8.0 (not an official CPE) Libssh2 Libssh2 1.7.0 (not an official CPE) Libssh2 Libssh2 1.6.0 (not an official CPE) Libssh2 Libssh2 1.5.0 (not an official CPE) libssh2 1.4.3 Libssh2 Libssh2 1.4.2 (not an official CPE) Libssh2 Libssh2 1.4.1 (not an official CPE) Libssh2 Libssh2 1.4.0 (not an official CPE) Libssh2 Libssh2 1.3.0 (not an official CPE) Libssh2 Libssh2 1.2.9 (not an official CPE) Libssh2 Libssh2 1.2.8 (not an official CPE) Libssh2 Libssh2 1.2.7 (not an official CPE) Libssh2 Libssh2 1.2.6 (not an official CPE) Libssh2 Libssh2 1.2.5 (not an official CPE) Libssh2 Libssh2 1.2.4 (not an official CPE) Libssh2 Libssh2 1.2.3 (not an official CPE) Libssh2 Libssh2 1.2.2 (not an official CPE) Libssh2 Libssh2 1.2.1 (not an official CPE) Libssh2 Libssh2 1.2 (not an official CPE) Libssh2 Libssh2 1.1 (not an official CPE) Libssh2 Libssh2 1.0 (not an official CPE) Libssh2 Libssh2 0.18 (not an official CPE) Libssh2 Libssh2 0.17 (not an official CPE) Libssh2 Libssh2 0.16 (not an official CPE) Libssh2 Libssh2 0.15 (not an official CPE) Libssh2 Libssh2 0.14 (not an official CPE) Libssh2 Libssh2 0.13 (not an official CPE) Libssh2 Libssh2 0.12 (not an official CPE) Libssh2 Libssh2 0.11 (not an official CPE) Libssh2 Libssh2 0.10 (not an official CPE) Libssh2 Libssh2 0.8 (not an official CPE) Libssh2 Libssh2 0.7 (not an official CPE) Libssh2 Libssh2 0.6 (not an official CPE) Libssh2 Libssh2 0.5 (not an official CPE) Libssh2 Libssh2 0.3 (not an official CPE) Libssh2 Libssh2 0.1 (not an official CPE)