Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-17498

28
FAUCET Score

CVE-2019-17498 is an integer overflow vulnerability in libssh2 versions 1.9.0 and earlier, affecting products like Debian, Fedora, and OpenSUSE. A malicious SSH server can exploit this flaw during client connection to trigger an out-of-bounds memory read, potentially leading to sensitive information disclosure or a denial of service on the client system. Rated with a CVSS score of 8.1 (High), this vulnerability requires user interaction (connecting to a malicious server) but has low attack complexity. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.9.0CPE matchmatch criteria
cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*
30CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
31CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
15.1CPE matchmatch criteria
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.79%
Probability of exploitation in next 30 days
EPSS Percentile
88.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0379 is in the 88th percentile among its peer group of 14,875 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (16)

9001patch availablevia llm_extracted
View patch
gatsbyjspatch availablevia llm_extracted
View patch
github_advisorypatch availablevia nvd_reference
View patch
joinmastodonpatch availablevia llm_extracted
View patch
mariadbpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17028-16820Fixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: cm1 libssh2 1.9.0-1 on CBL Mariner 1.0Fixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: cbl2 libssh2 1.9.0-1 on CBL Mariner 2.0Fixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.9.0-1
microsoftpatch availablevia msrc
Product: 17029-16823Fixed in: 1.9.0-1
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libssh2-0:1.8.0-4.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift DoFixed in: openshiftdo/odo-init-image-rhel7:1.1.3-2
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8 Advanced VirtualizationFixed in: virt:8.0/libssh2

Vendor Advisories (7)

gatsbyjsllm-gatsbyjs-3309ac0eec83b620MEDIUM

HP Universal Scan - Potential Information Disclosure

May 7, 2025
9001llm-9001-da523d4a87b99f69MEDIUM

HP Universal Scan - Potential Information Disclosure

May 7, 2025
joinmastodonllm-joinmastodon-4453d195e4a605cfMEDIUM

HP Universal Scan - Potential Information Disclosure

May 7, 2025
mariadbllm-mariadb-ed093e3cbb0fa9cdMEDIUM

HP Universal Scan - Potential Information Disclosure

May 7, 2025
microsoft2020-Aug/CVE-2019-17498

CVE-2019-17498

Aug 11, 2020
redhatCVE-2019-17498Moderate

libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

Oct 16, 2019
microsoft2019-Oct/CVE-2019-17498Important

In libssh2 v1.9.0 and earlier versions the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

Oct 8, 2019

References

lists.opensuse.org / opensuse-security-announce/2019-11/msg00026.html
Mailing ListThird Party Advisory
packetstormsecurity.com / files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html
blog.semmle.com / libssh2-integer-overflow-CVE-2019-17498
Broken Link
github.com / kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498
ExploitThird Party Advisory
github.com / libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c
ExploitThird Party Advisory
github.com / libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9c
PatchThird Party Advisory
lists.debian.org / debian-lts-announce/2019/11/msg00010.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2021/12/msg00013.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2023/09/msg00006.html
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB
security.netapp.com / advisory/ntap-20220909-0004
Third Party Advisory