Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3845 State: PUBLISHED Published: 2019-04-11T14:31:40 Last Updated: 2024-08-04T19:19:18.596Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: qpid-dispatch-router Problem Types: CWE-284 Description: A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands. Additional Analyst Notes: -
hods to any host also registered to Satellite (or Capsule) and execute privileged commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3845 - https://access.redhat.com/errata/RHSA-2019:1223
CVE ID: CVE-2019-3846 State: PUBLISHED Published: 2019-06-03T18:25:57 Last Updated: 2024-08-04T19:19:18.683Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: kernel Problem Types: CWE-122 Description: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/oss-sec/2019/q2/133 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3846 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLGWJKLMTBBB53D5QLS
6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLGWJKLMTBBB53D5QLS4HOY2EH246WBE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/ - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html - https://seclists.org/bugtraq/2019/Jun/26 - http://lists.opensuse.org/opensuse-security-ann
ounce/2019-06/msg00040.html - https://seclists.org/bugtraq/2019/Jun/26 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html - https://security.netapp.com/advisory/ntap-20190710-0002/ - https://seclists.org/bugtraq/2019/Jul/33 - http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4093-1/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4095-2/ - https://usn.ubuntu.com/4095-1/ - http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html - https://usn.ubuntu.com/4117-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:27
1.html - https://usn.ubuntu.com/4117-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:2703 - https://access.redhat.com/errata/RHSA-2019:2741 - https://access.redhat.com/errata/RHSA-2019:3076 - https://access.redhat.com/errata/RHSA-2019:3055 - https://access.redhat.com/errata/RHSA-2019:3089 - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://access.redhat.com/errata/RHSA-2020:0174
CVE ID: CVE-2019-3847 State: PUBLISHED Published: 2019-03-27T00:00:00 Last Updated: 2024-08-04T19:19:18.591Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: Moodle Problem Types: CWE-79 Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
ogging in on their behalf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107489 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3847 - https://moodle.org/mod/forum/discuss.php?d=384010#p1547742
CVE ID: CVE-2019-3848 State: PUBLISHED Published: 2019-03-26T00:00:00 Last Updated: 2024-08-04T19:19:18.679Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-863 Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Permissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar events. (Note: It was read-only access, users could not edit the events.) Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=384011#p15
) Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=384011#p1547743 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848
CVE ID: CVE-2019-3849 State: PUBLISHED Published: 2019-03-26T17:46:47 Last Updated: 2024-08-04T19:19:18.735Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-285 Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849 - https://moodle.org/mod/forum/discuss.php?d=384012#p1547744
CVE ID: CVE-2019-3850 State: PUBLISHED Published: 2019-03-26T17:46:54 Last Updated: 2024-08-04T19:19:18.578Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: n/a Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850 - ht
nal Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850 - https://moodle.org/mod/forum/discuss.php?d=384013#p1547745
CVE ID: CVE-2019-3851 State: PUBLISHED Published: 2019-03-26T17:46:59 Last Updated: 2024-08-04T19:19:18.615Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: n/a Description: A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3851 - https://moodle.org/mod/forum/discuss.php?d=384014#p1547746
CVE ID: CVE-2019-3852 State: PUBLISHED Published: 2019-03-26T17:47:06 Last Updated: 2024-08-04T19:19:18.551Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: n/a Description: A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilities Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=384015#p1547748 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3852
CVE ID: CVE-2019-3853 State: REJECTED Published: 2021-03-16T21:06:12 Last Updated: 2021-03-16T21:06:12 Description: No description available.
CVE ID: CVE-2019-3854 State: REJECTED Published: 2019-07-11T18:39:31 Last Updated: 2019-07-11T18:39:31 Description: No description available.
CVE ID: CVE-2019-3855 State: PUBLISHED Published: 2019-03-21T20:13:25 Last Updated: 2024-08-04T19:19:18.675Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-190, CWE-787 Description: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/
: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtraq/2019/Mar/25 - https://www.libssh2.org/CVE-2019-3855.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855 - http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html - http://www.securityfocus.com/bid/107485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html -
ity-advisories/brocade-security-advisory-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - https://access.redhat.com/errata/RHSA-2019:0679 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:1175 - https://access.redhat.com/errata/RHSA-2019
s.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:1175 - https://access.redhat.com/errata/RHSA-2019:1652 - https://access.redhat.com/errata/RHSA-2019:1791 - https://access.redhat.com/errata/RHSA-2019:1943 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/ - https://access.redhat.com/errata/RHSA-2019:2399 - https://support.apple.com/kb/HT210609 - https://seclists.org/bugtraq/2019/Sep/49 - http://seclists.org/fulldisclosure/2019/Sep/42 - https://www.oracle.com/t
9 - https://seclists.org/bugtraq/2019/Sep/49 - http://seclists.org/fulldisclosure/2019/Sep/42 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3856 State: PUBLISHED Published: 2019-03-25T18:31:03.000Z Last Updated: 2025-04-23T19:48:00.365Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-190, CWE-787 Description: An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.libssh2.org/CVE-2019-3856.html -
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.libssh2.org/CVE-2019-3856.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - https://access.redhat.com/errata/RHSA-2019:0679 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https:
sts.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:1175 - https://access.redhat.com/errata/RHSA-2019:1652 - https://access.redhat.com/errata/RHSA-2019:1791 - https://access.redhat.com/errata/RHSA-2019:1943 - https://access.redhat.com/errata/RHSA-2019:2399 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3857 State: PUBLISHED Published: 2019-03-25T18:30:56.000Z Last Updated: 2025-04-23T19:48:11.114Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-190, CWE-787 Description: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.re
he server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857 - https://www.libssh2.org/CVE-2019-3857.html - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - https://access.redhat.com/errata/RHSA-2019:0679 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/securi
ist/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:1175 - https://access.redhat.com/errata/RHSA-2019:1652 - https://access.redhat.com/errata/RHSA-2019:1791 - https://access.redhat.com/errata/RHSA-2019:1943 - https://access.redhat.com/errata/RHSA-2019:2399 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3858 State: PUBLISHED Published: 2019-03-21T20:22:47 Last Updated: 2024-08-04T19:19:18.593Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-125 Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtraq/2019/Mar/25 - https://bugzilla
- http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtraq/2019/Mar/25 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3858 - https://www.libssh2.org/CVE-2019-3858.html - http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html - http://www.securityfocus.com/bid/107485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/
ry-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:2136 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3859 State: PUBLISHED Published: 2019-03-20T21:18:13 Last Updated: 2024-08-04T19:19:18.624Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-125 Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtraq/2019/Mar/25 - https://www
nces: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtraq/2019/Mar/25 - https://www.libssh2.org/CVE-2019-3859.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3859 - http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html - http://www.securityfocus.com/bid/107485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advi
dvisory-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html - http://lists.opensuse.org/ope
2019/Apr/25 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3860 State: PUBLISHED Published: 2019-03-25T18:30:50 Last Updated: 2024-08-04T19:19:18.589Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-125 Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.libssh2.org/CVE-2019-3860.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3860 - https://lists.debian.o
/www.libssh2.org/CVE-2019-3860.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3860 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html - https://lists.debia
g/bugtraq/2019/Apr/25 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00028.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3861 State: PUBLISHED Published: 2019-03-25T18:30:43 Last Updated: 2024-08-04T19:19:18.629Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-125 Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.libssh2.org/CVE-2019-3861.html - https://bugzilla.redhat.com/show_bug.cgi?id=
ogram Container: References: - https://www.libssh2.org/CVE-2019-3861.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3861 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https://security.netapp.com/advisory/ntap-20190327-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ - https://www.debian.org/security/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:2136 - https://
ty/2019/dsa-4431 - https://seclists.org/bugtraq/2019/Apr/25 - https://access.redhat.com/errata/RHSA-2019:2136 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-3862 State: PUBLISHED Published: 2019-03-20T21:39:52 Last Updated: 2024-08-04T19:19:18.615Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: The libssh2 Project Products: libssh2 Problem Types: CWE-130 Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtra
E Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/18/3 - https://seclists.org/bugtraq/2019/Mar/25 - https://www.libssh2.org/CVE-2019-3862.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3862 - http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html - http://www.securityfocus.com/bid/107485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767 - https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html - https