ALPINE-CVE-2019-3855

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2019-3855
Published: 21 Mar 2019, 21:29
Last modified:03 Dec 2025, 22:46

Vulnerability Summary

Overall Risk (default)
medium
35/100
CVSS Score
8.8 HIGH
3.1 (osv_alpine)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Mar 2019, 21:29
Published
Vulnerability first disclosed
03 Dec 2025, 22:46
Last Modified
Vulnerability information updated

Description

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

CVSS Metrics

  • v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Systems

  • alpine•libssh2

    < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0 | < 1.8.1-r0

References (1)