Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libssh2@1.8.0-3?arch=el7
purl pkg:rpm/redhat/libssh2@1.8.0-3?arch=el7
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-97nz-s1q6-x3fc
Aliases:
CVE-2019-3861
Out-of-bounds Read An out-of-bounds read flaw was discovered in libssh2 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. There are no reported fixed by versions.
VCID-rv81-jwkz-w7b5
Aliases:
CVE-2019-3858
Out-of-bounds Read An out-of-bounds read flaw was discovered in libssh2 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:20:46.687187+00:00 RedHat Importer Affected by VCID-97nz-s1q6-x3fc https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3861.json 38.0.0
2026-04-01T14:20:46.623636+00:00 RedHat Importer Affected by VCID-rv81-jwkz-w7b5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3858.json 38.0.0