CVE-2019-17498

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

• CWE-190

• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html
• https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/Broken Link
• https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498Exploit, Third Party Advisory
• https://github.com/libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c#L480Exploit, Third Party Advisory
• https://github.com/libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9cPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00010.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00013.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB/
• https://security.netapp.com/advisory/ntap-20220909-0004/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html
• https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/Broken Link
• https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498Exploit, Third Party Advisory
• https://github.com/libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c#L480Exploit, Third Party Advisory
• https://github.com/libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9cPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00010.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00013.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB/
• https://security.netapp.com/advisory/ntap-20220909-0004/Third Party Advisory

Published

Oct 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17491Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Probl…6.1
• CVE-2019-17493Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Probl…6.1
• CVE-2019-17494laravel-bjyblog 6.1.1 has XSS via a crafted URL.6.1
• CVE-2019-17495A Cascading Style Sheets (CSS) injection vulnerability in Sw…9.8
• CVE-2019-17496Craft CMS before 3.3.8 has stored XSS via a name field. This…6.1
• CVE-2019-17497Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO …6.5
• CVE-2019-17499The setter.xml component of the Common Gateway Interface on …8.8
• CVE-2019-1750A vulnerability in the Easy Virtual Switching System (VSS) o…7.4
• CVE-2019-17501Centreon 19.04 allows attackers to execute arbitrary OS comm…8.8
• CVE-2019-17502Hydra through 0.1.8 has a NULL pointer dereference and daemo…7.5
• CVE-2019-17503An issue was discovered in Kirona Dynamic Resource Schedulin…5.3
• CVE-2019-17504An issue was discovered in Kirona Dynamic Resource Schedulin…6.1