{"items":[{"id":"CVE-2019-3856","published":"2019-03-25T18:31:03.000Z","updated":"2026-10-14T06:35:23.162Z","title":"An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A…","severity":"HIGH","score":7.5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.06131,"kevAdded":null},{"id":"CVE-2019-3857","published":"2019-03-25T18:30:56.000Z","updated":"2026-10-14T06:35:25.158Z","title":"An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an…","severity":"HIGH","score":7.5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.06131,"kevAdded":null},{"id":"CVE-2019-3860","published":"2019-03-25T18:30:50.000Z","updated":"2026-10-14T06:35:29.708Z","title":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a…","severity":"MEDIUM","score":5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.05424,"kevAdded":null},{"id":"CVE-2019-3861","published":"2019-03-25T18:30:43.000Z","updated":"2026-10-14T06:35:31.280Z","title":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed.…","severity":"MEDIUM","score":5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.05118,"kevAdded":null},{"id":"CVE-2019-3863","published":"2019-03-25T17:52:10.000Z","updated":"2026-10-14T06:35:34.230Z","title":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages…","severity":"HIGH","score":7.5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.03437,"kevAdded":null},{"id":"CVE-2019-3858","published":"2019-03-21T20:22:47.000Z","updated":"2026-10-14T06:35:26.727Z","title":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who…","severity":"MEDIUM","score":5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.06448,"kevAdded":null},{"id":"CVE-2019-3855","published":"2019-03-21T20:13:25.000Z","updated":"2026-10-14T06:35:21.490Z","title":"An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A…","severity":"HIGH","score":7.5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.09294,"kevAdded":null},{"id":"CVE-2019-3862","published":"2019-03-20T21:39:52.000Z","updated":"2026-10-14T06:35:32.835Z","title":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are…","severity":"HIGH","score":7.3,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.07898,"kevAdded":null},{"id":"CVE-2019-3859","published":"2019-03-20T21:18:13.000Z","updated":"2026-10-14T06:35:28.096Z","title":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who…","severity":"MEDIUM","score":5,"vendor":"The libssh2 Project","product":"libssh2","kev":false,"epss":0.06275,"kevAdded":null}]}