{"id":"CVE-2019-3862","title":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed","summary":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Den…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-130","CWE-125"],"vendor":"libssh2","product":"libssh2","affected":["libssh2 < 1.8.1","fedora = 29","debian_linux = 8.0","ontap_select_deploy_administration_utility","leap = 42.3"],"patched":["libssh2 1.8.1"],"published":"2019-03-21","updated":"2026-10-14","sourceUpdated":"2026-10-14T07:16:53.133","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-3862","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","label":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html","label":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2019/03/18/3","label":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/107485","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2019:1884","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3862","label":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","label":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","label":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/","label":"secalert@redhat.com"},{"url":"https://seclists.org/bugtraq/2019/Apr/25","label":"secalert@redhat.com"},{"url":"https://seclists.org/bugtraq/2019/Mar/25","label":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20190327-0005/","label":"secalert@redhat.com"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767","label":"secalert@redhat.com"},{"url":"https://www.debian.org/security/2019/dsa-4431","label":"secalert@redhat.com"},{"url":"https://www.libssh2.org/CVE-2019-3862.html","label":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","label":"secalert@redhat.com"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/03/18/3","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/107485","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:1884","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3862","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Apr/25","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Mar/25","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190327-0005/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4431","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.libssh2.org/CVE-2019-3862.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-3862.json"},{"url":"https://access.redhat.com/security/cve/CVE-2019-3862"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687312"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3862"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3862"},{"url":"https://access.redhat.com/errata/RHBA-2020:0547"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.07898,"epssPercentile":0.94687,"ingestedAt":"2026-10-14T07:21:04.808Z","slug":"CVE-2019-3862","body":"## Overview\n\nAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.\n\n## Affected\n\n- `libssh2 < 1.8.1`\n- `fedora = 29`\n- `debian_linux = 8.0`\n- `ontap_select_deploy_administration_utility`\n- `leap = 42.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `libssh2 1.8.1`\n\n## Vendor advisories\n\n- **RHSA-2019:1884** · Red Hat · fixed in: Red Hat Enterprise Linux Client (v. 7), Red Hat Enterprise Linux Client Optional (v. 7), Red Hat Enterprise Linux ComputeNode (v. 7), Red Hat Enterprise Linux ComputeNode Optional (v. 7), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7), … · released 2019-07-29 · [advisory](https://access.redhat.com/errata/RHSA-2019:1884)\n- **RHBA-2020:0547** · Red Hat · fixed in: Red Hat Ansible Tower 3.4 for RHEL 7 Server · released 2020-02-18 · [advisory](https://access.redhat.com/errata/RHBA-2020:0547)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Virtualization 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Virtualization 4 · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-3862.json)","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":40.2,"likelihood":1.6,"exploitation":0,"ransomware":0},"changes":[]}