Test Kennung:	1.3.6.1.4.1.25623.1.1.2.2019.1360
Kategorie:	Huawei EulerOS Local Security Checks
Titel:	Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2019-1360)
Zusammenfassung:	The remote host is missing an update for the Huawei EulerOS 'libssh2' package(s) announced via the EulerOS-SA-2019-1360 advisory.
Beschreibung:	Summary: The remote host is missing an update for the Huawei EulerOS 'libssh2' package(s) announced via the EulerOS-SA-2019-1360 advisory. Vulnerability Insight: An out of bounds read flaw was discovered in libssh2 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory.(CVE-2019-3858) An out of bounds read flaw was discovered in libssh2 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory.(CVE-2019-3859) An out of bounds read flaw was discovered in libssh2 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory.(CVE-2019-3860) An out of bounds read flaw was discovered in libssh2 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory.(CVE-2019-3861) An out of bounds read flaw was discovered in libssh2 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory.(CVE-2019-3862) Affected Software/OS: 'libssh2' package(s) on Huawei EulerOS Virtualization 2.5.3. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3858 BugTraq ID: 107485 http://www.securityfocus.com/bid/107485 Bugtraq: 20190319 [slackware-security] libssh2 (SSA:2019-077-01) (Google Search) https://seclists.org/bugtraq/2019/Mar/25 Bugtraq: 20190415 [SECURITY] [DSA 4431-1] libssh2 security update (Google Search) https://seclists.org/bugtraq/2019/Apr/25 Debian Security Information: DSA-4431 (Google Search) https://www.debian.org/security/2019/dsa-4431 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/ http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html https://www.libssh2.org/CVE-2019-3858.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html http://www.openwall.com/lists/oss-security/2019/03/18/3 RedHat Security Advisories: RHSA-2019:2136 https://access.redhat.com/errata/RHSA-2019:2136 SuSE Security Announcement: openSUSE-SU-2019:1075 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html SuSE Security Announcement: openSUSE-SU-2019:1109 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2019-3859 https://www.libssh2.org/CVE-2019-3859.html https://lists.debian.org/debian-lts-announce/2019/04/msg00006.html https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html SuSE Security Announcement: openSUSE-SU-2019:1290 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html SuSE Security Announcement: openSUSE-SU-2019:1291 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html Common Vulnerability Exposure (CVE) ID: CVE-2019-3860 https://www.libssh2.org/CVE-2019-3860.html https://lists.debian.org/debian-lts-announce/2019/07/msg00028.html SuSE Security Announcement: openSUSE-SU-2019:1640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html Common Vulnerability Exposure (CVE) ID: CVE-2019-3861 https://www.libssh2.org/CVE-2019-3861.html Common Vulnerability Exposure (CVE) ID: CVE-2019-3862 https://www.libssh2.org/CVE-2019-3862.html https://www.oracle.com/security-alerts/cpujan2020.html RedHat Security Advisories: RHSA-2019:1884 https://access.redhat.com/errata/RHSA-2019:1884
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.