CVE-2019-3858— libssh2 缓冲区错误漏洞

I. CVE-2019-3858の基本情報

影響を受ける製品

II. CVE-2019-3858の公開POC

III. CVE-2019-3858のインテリジェンス情報

• https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlx_refsource_MISC
• https://security.netapp.com/advisory/ntap-20190327-0005/x_refsource_CONFIRM
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3858x_refsource_CONFIRM
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767x_refsource_CONFIRM
• http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.htmlx_refsource_MISC
• https://www.libssh2.org/CVE-2019-3858.htmlx_refsource_MISC
• http://www.securityfocus.com/bid/107485vdb-entryx_refsource_BID
• https://www.debian.org/security/2019/dsa-4431vendor-advisoryx_refsource_DEBIAN
• https://access.redhat.com/errata/RHSA-2019:2136vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.htmlvendor-advisoryx_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.htmlvendor-advisoryx_refsource_SUSE
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/vendor-advisoryx_refsource_FEDORA
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/vendor-advisoryx_refsource_FEDORA
• http://www.openwall.com/lists/oss-security/2019/03/18/3mailing-listx_refsource_MLIST
• https://seclists.org/bugtraq/2019/Mar/25mailing-listx_refsource_BUGTRAQ
• https://seclists.org/bugtraq/2019/Apr/25mailing-listx_refsource_BUGTRAQ
• https://lists.debian.org/debian-lts-announce/2019/03/msg00032.htmlmailing-listx_refsource_MLIST
• https://nvd.nist.gov/vuln/detail/CVE-2019-3858

IV. 関連脆弱性

V. CVE-2019-3858へのコメント