Skip to content
COOEY

EXPOSURES › CVE-2019-3860

CVE-2019-3860

MEDIUM
DETAIL
SourceNVD · cve Published2019-03-25 CVSS5.0 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-3860 ↗

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

DESCRIPTION

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

AFFECTED FEDRAMP PRODUCTS · 1
PRODUCTSTATUS
Cloud Insights
NetApp
In Process