| Package | Affected versions | Patched versions |
|---|---|---|
| libssh2 | = 1.11.1 |
libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free