CVE-2019-3862EPSS p94.7%
CVE-2019-3862CVE-2019-3862
libssh2 / libssh2
Description
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
Scoring
| CVSS | 7.3 () |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| EPSS | 7.90% probability of exploitation · percentile 94.7% · 2026-10-17T12:00:28Z |
| Last modified | 2026-10-14 |