{"id":"CVE-2019-3863","state":"PUBLISHED","title":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length a","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.","publishedAt":"2019-03-25T17:52:10.000Z","updatedAt":"2026-10-14T06:35:34.230Z","severity":{"score":7.5,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"redhat"},"assigner":"redhat","products":["The libssh2 Project libssh2"],"affected":[{"vendor":"The libssh2 Project","product":"libssh2","versions":[{"version":"1.8.1","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863","https://www.libssh2.org/CVE-2019-3863.html","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://security.netapp.com/advisory/ntap-20190327-0005/","https://access.redhat.com/errata/RHSA-2019:0679","http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://www.debian.org/security/2019/dsa-4431","https://seclists.org/bugtraq/2019/Apr/25","https://access.redhat.com/errata/RHSA-2019:1175","https://access.redhat.com/errata/RHSA-2019:1652","https://access.redhat.com/errata/RHSA-2019:1791","https://access.redhat.com/errata/RHSA-2019:1943","https://access.redhat.com/errata/RHSA-2019:2399","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"weaknesses":["CWE-190","CWE-787"],"ingestedAt":"2026-10-29T19:45:59.128Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/3xxx/CVE-2019-3863.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2019-3863","state":"PUBLISHED","datePublished":"2019-03-25T17:52:10.000Z","dateUpdated":"2026-10-14T06:35:34.230Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error."}],"affected":[{"vendor":"The libssh2 Project","product":"libssh2","versions":[{"version":"1.8.1","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863","tags":["x_refsource_CONFIRM"]},{"url":"https://www.libssh2.org/CVE-2019-3863.html","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","name":"[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://security.netapp.com/advisory/ntap-20190327-0005/","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0679","name":"RHSA-2019:0679","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","name":"openSUSE-SU-2019:1075","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","name":"openSUSE-SU-2019:1109","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","name":"FEDORA-2019-3348cb4934","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://www.debian.org/security/2019/dsa-4431","name":"DSA-4431","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://seclists.org/bugtraq/2019/Apr/25","name":"20190415 [SECURITY] [DSA 4431-1] libssh2 security update","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1175","name":"RHSA-2019:1175","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1652","name":"RHSA-2019:1652","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1791","name":"RHSA-2019:1791","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1943","name":"RHSA-2019:1943","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2399","name":"RHSA-2019:2399","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","description":"CWE-190","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-787","description":"CWE-787","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2025-12-19T03:02:32.466Z"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2019-3863","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"libssh2","version":{"version_data":[{"version_value":"1.8.1"}]}}]},"vendor_name":"The libssh2 Project"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error."}]},"impact":{"cvss":[[{"vectorString":"7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"}]]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-190"}]},{"description":[{"lang":"eng","value":"CWE-787"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863"},{"name":"https://www.libssh2.org/CVE-2019-3863.html","refsource":"MISC","url":"https://www.libssh2.org/CVE-2019-3863.html"},{"name":"[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"},{"name":"https://security.netapp.com/advisory/ntap-20190327-0005/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20190327-0005/"},{"name":"RHSA-2019:0679","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:0679"},{"name":"openSUSE-SU-2019:1075","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"},{"name":"openSUSE-SU-2019:1109","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"},{"name":"FEDORA-2019-3348cb4934","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"},{"name":"DSA-4431","refsource":"DEBIAN","url":"https://www.debian.org/security/2019/dsa-4431"},{"name":"20190415 [SECURITY] [DSA 4431-1] libssh2 security update","refsource":"BUGTRAQ","url":"https://seclists.org/bugtraq/2019/Apr/25"},{"name":"RHSA-2019:1175","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1175"},{"name":"RHSA-2019:1652","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1652"},{"name":"RHSA-2019:1791","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1791"},{"name":"RHSA-2019:1943","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1943"},{"name":"RHSA-2019:2399","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:2399"},{"name":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","refsource":"MISC","url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.libssh2.org/CVE-2019-3863.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","name":"[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190327-0005/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0679","name":"RHSA-2019:0679","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","name":"openSUSE-SU-2019:1075","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","name":"openSUSE-SU-2019:1109","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","name":"FEDORA-2019-3348cb4934","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.debian.org/security/2019/dsa-4431","name":"DSA-4431","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://seclists.org/bugtraq/2019/Apr/25","name":"20190415 [SECURITY] [DSA 4431-1] libssh2 security update","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1175","name":"RHSA-2019:1175","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1652","name":"RHSA-2019:1652","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1791","name":"RHSA-2019:1791","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1943","name":"RHSA-2019:1943","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2399","name":"RHSA-2019:2399","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:19:18.614Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-23T13:20:45.609039Z","id":"CVE-2019-3863","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-23T19:48:19.703Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"shortName":"siemens-SADP","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","dateUpdated":"2026-10-14T06:35:34.230Z"},"x_adpType":"supplier"}]}}}