| Package | Affected versions | Patched versions |
|---|---|---|
| libssh2 | ≥ 1.2.8, ≤ 1.8.0 | |
| peoplesoft enterprise peopletools | = 8.56= 8.57 |
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free