CVE-2019-17498 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Information disclosure |
| Description | An out-of-bounds read has been found in libssh2 <= 1.9.0, when libssh2 is used to connect to a malicious server, leading to denial of service or information disclosure. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1690 | libssh2 | 1.9.0-2 | 1.9.0-3 | Medium | Fixed | FS#70009 |
| References |
|---|
https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/ https://github.com/libssh2/libssh2/pull/402/commits/1c6fa92b77e34d089493fe6d3e2c6c8775858b94 |