Errata overview
Errata ID 49
Date 2019-04-17
Source package libssh2
Fixed in version 1.7.0-1+deb9u1
Description
This update addresses the following issues:
* Integer overflow in transport read resulting in out of bounds write
  (CVE-2019-3855)
* Integer overflow in keyboard interactive handling resulting in out of
  bounds write (CVE-2019-3856)
* Integer overflow in SSH packet processing channel resulting in out of
  bounds write (CVE-2019-3857)
* Zero-byte allocation with a specially crafted SFTP packed leading to an
  out-of-bounds read (CVE-2019-3858)
* Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev
  resulting in out-of-bounds read (CVE-2019-3859)
* Out-of-bounds reads with specially crafted SFTP packets (CVE-2019-3860)
* Out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
* Out-of-bounds memory comparison with specially crafted message channel
  request (CVE-2019-3862)
* Integer overflow in user authenticate keyboard interactive allows
  out-of-bounds writes (CVE-2019-3863)
Additional notes
CVE ID CVE-2019-3855
CVE-2019-3856
CVE-2019-3857
CVE-2019-3858
CVE-2019-3859
CVE-2019-3860
CVE-2019-3861
CVE-2019-3862
CVE-2019-3863
UCS Bug number #49292