Homepage

Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package redhat-virtualization-host.src  (opens in a new tab)

Threat Intelligence

EPSS
4.54% (90th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-REDHATVIRTUALIZATIONHOSTSRC-12592251
  • published10 Sept 2025
  • disclosed13 Mar 2019
Report a new vulnerability Found a mistake?

Introduced: 13 Mar 2019

CVE-2019-3857  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream redhat-virtualization-host.src package and not the redhat-virtualization-host.src package as distributed by RHEL.

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

References