CVE-2019-3859
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A r
CVSS
9.1
Crítico
EPSS
6.3%
p94
KEV
—
Exploit Today
28
0-100
Publicado: 21 mar 2019 · Última mod.: 14 oct 2026 · CWE-125
6.3%EPSS · 30 días6.3%
2026-10-042026-11-01
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2019/03/18/3
- www.securityfocus.comhttp://www.securityfocus.com/bid/107485
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3859
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/03/msg00032.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/04/msg00006.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2019/07/msg00024.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/
- seclists.orghttps://seclists.org/bugtraq/2019/Apr/25
- seclists.orghttps://seclists.org/bugtraq/2019/Mar/25
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20190327-0005/
- www.broadcom.comhttps://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767
- www.debian.orghttps://www.debian.org/security/2019/dsa-4431
- www.libssh2.orghttps://www.libssh2.org/CVE-2019-3859.html
- www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1204533.3 BAJ—
———The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hfs.c that reads the decmpfs header without checking attribute length. Attackers can supply a crafted HFS+ image with a com.apple.decmpfs attr_size of 1 to 15 to read past the allocation and crash analysis tools like istat or icat.3hCVE-2026-1204376.1 MED—
———Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the tgatoppm converter's get_pixel() function that uses unchecked pixel values as color map indexes. Attackers can supply a crafted color-mapped Targa file whose pixel values exceed the declared color map bounds to crash the converter or leak adjacent memory into the output image.3hCVE-2026-111959——
———Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0.
Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array.
Users are recommended to upgrade to versions 60.1.0, 59.3.2, 58.4.1, 57.3.2 which fixes the issue.5hCVE-2026-685905.3 MED—
——0In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01387180; Issue ID: MSV-5152.3hCVE-2026-205985.3 MED—
——0In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896.3hCVE-2026-205975.3 MED—
——0In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758223; Issue ID: MSV-8909.3h