CVE-2019-13115

Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 16 Jul 2019, 00:00
Last modified:04 Aug 2024, 23:41

Vulnerability Summary

Overall Risk (default)
high
51/100
CVSS Score
8.1 HIGH
v3.1 (nvd)
EPSS Score
42.4% HIGH
42% probability -0.42%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

16 Jul 2019, 00:00
Published
Vulnerability first disclosed
04 Aug 2024, 23:41
Last Modified
Vulnerability information updated

Description

In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.

CVSS Metrics

  • v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
  • v2.0•MEDIUM•Score: 5.8AV:N/AC:M/Au:N/C:P/I:N/A:P

EPSS Trends

Current EPSS score: 42.40%• Percentile: 98%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

  • CWE-190•Integer Overflow or Wraparound

    The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected Systems

  • debian•debian_linux

    8.0 | 9.0

  • f5•traffix_systems_signaling_delivery_controller

    ≥ 5.0.0, ≤ 5.1.0

  • fedoraproject•fedora

    29 | 30

  • libssh2•libssh2

    < 1.9.0

  • netapp•cloud_backup

    na

  • netapp•e-series_santricity_os_controller

    ≥ 11.0.0, ≤ 11.70.1

  • netapp•ontap_select_deploy_administration_utility

    na

References (15)