CVE-2019-17498
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…
Published Oct 21, 2019 · updated Oct 14, 2026 · libssh2 libssh2
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 21, 2019 · NIST NVD
Detected
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Oct 14, 2026 · NIST NVD
Updated
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
Affected
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora30
- cpe fedoraproject/fedora31
- cpe libssh2/libssh2version unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/bootstrap osversion unspecified
- cpe netapp/element softwareversion unspecified
- cpe opensuse/leap15.1
Sources
- CVE.orgVulnerability recordCVE-2019-17498
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2019-17498
30-day exploitation probability 3.8%
first.org - NIST NVDVulnerability recordCVE-2019-17498
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive inf
nvd.nist.gov - Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html
Packet Storm link already published on the finding.
packetstormsecurity.com