An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-docsUpgrade libssh2-develUpgrade libssh2 | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade nbdkit-plugin-gzipUpgrade virt-v2v-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-debuginfoUpgrade hivexUpgrade libguestfs-java-develUpgrade qemu-img-debuginfoUpgrade supermin-debugsourceUpgrade python3-libguestfsUpgrade libguestfs-winsupportUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-sshUpgrade libguestfs-gobject-debuginfoUpgrade netcf-debugsourceUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkitUpgrade libiscsi-utilsUpgrade qemu-kvm-coreUpgrade netcf-libs-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-nodedevUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-lock-sanlockUpgrade ruby-libguestfsUpgrade libiscsiUpgrade libguestfs-debuginfoUpgrade libguestfs-tools-cUpgrade nbdkit-basic-pluginsUpgrade virt-dib-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libiscsi-debugsourceUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-debugsourceUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-guest-agentUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-libsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libssh2-debugsourceUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-bash-completionUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-develUpgrade qemu-imgUpgrade libvirtUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-develUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade netcf-develUpgrade qemu-kvm-debuginfoUpgrade seavgabios-binUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-bash-completionUpgrade hivex-debuginfoUpgrade libssh2Upgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-man-pages-ukUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-clientUpgrade nbdkit-plugin-xz-debuginfoUpgrade seabiosUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-java-debuginfoUpgrade qemu-kvmUpgrade python3-hivexUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-rbd-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-develUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-curlUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-gfs2Upgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-debugsourceUpgrade ruby-hivexUpgrade qemu-kvm-commonUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-xfsUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-config-networkUpgrade supermin-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemonUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-docsUpgrade libvirt-libs-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade netcf-libsUpgrade nbdkit-example-pluginsUpgrade seabios-binUpgrade python3-libvirtUpgrade perl-hivex-debuginfoUpgrade hivex-develUpgrade libvirt-nssUpgrade libiscsi-develUpgrade libvirt-daemon-debuginfoUpgrade supermin-debuginfoUpgrade libssh2-docsUpgrade perl-Sys-VirtUpgrade perl-hivexUpgrade libvirt-daemon-driver-qemuUpgrade sgabios-binUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade hivex-debugsourceUpgrade virt-v2vUpgrade libguestfs-inspect-iconsUpgrade nbdkit-debuginfoUpgrade netcfUpgrade superminUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade virt-p2v-makerUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nss-debuginfoUpgrade virt-dibUpgrade qemu-kvm-block-gluster-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-python3 | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-develUpgrade ruby-libguestfsUpgrade qemu-kvm-commonUpgrade libvirt-nssUpgrade hivexUpgrade sgabiosUpgrade qemu-kvm-block-glusterUpgrade libguestfs-gfs2Upgrade libssh2-docsUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-nodedevUpgrade python3-libguestfsUpgrade libvirt-clientUpgrade perl-Sys-GuestfsUpgrade libguestfs-bash-completionUpgrade lua-guestfsUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade qemu-kvm-block-sshUpgrade perl-hivexUpgrade virt-v2vUpgrade libssh2-develUpgrade nbdkit-plugin-xzUpgrade superminUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade qemu-guest-agentUpgrade libguestfs-inspect-iconsUpgrade seabiosUpgrade libvirtUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-rbdUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-xfsUpgrade hivex-develUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storageUpgrade libssh2Upgrade libvirt-daemon-kvmUpgrade netcf-libsUpgrade python3-libvirtUpgrade libvirt-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libguestfs-tools-cUpgrade nbdkit-example-pluginsUpgrade libguestfs-rsyncUpgrade seabios-binUpgrade libguestfs-gobject-develUpgrade virt-p2v-makerUpgrade supermin-develUpgrade qemu-kvmUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsiUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javadocUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-coreUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logicalUpgrade sgabios-binUpgrade ruby-hivexUpgrade qemu-kvm-block-iscsiUpgrade libvirt-docsUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-vddkUpgrade libguestfs-winsupportUpgrade virt-dibUpgrade qemu-imgUpgrade netcfUpgrade nbdkit-plugin-gzipUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-mpath | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libguestfs-debugsourceUpgrade python3-libvirtUpgrade hivex-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-config-networkUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-rescueUpgrade hivex-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade superminUpgrade libiscsi-develUpgrade virt-p2v-makerUpgrade python3-libguestfs-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-Sys-Guestfs-debuginfoUpgrade lua-guestfsUpgrade hivex-debugsourceUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade perl-hivexUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-nssUpgrade libssh2-docsUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade netcf-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-clientUpgrade perl-hivex-debuginfoUpgrade ruby-libguestfsUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-toolsUpgrade nbdkit-develUpgrade supermin-develUpgrade libvirt-daemon-driver-nwfilterUpgrade seabios-binUpgrade libvirt-docsUpgrade seavgabios-binUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-commonUpgrade libvirtUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvmUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-debugsourceUpgrade virt-v2vUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-libs-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-javadocUpgrade seabiosUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivexUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-imgUpgrade libssh2Upgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade netcf-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libiscsi-utilsUpgrade libssh2-develUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-adminUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storageUpgrade virt-dib-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-debugsourceUpgrade python3-libguestfsUpgrade nbdkit-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade libvirt-lock-sanlockUpgrade libguestfs-javaUpgrade nbdkit-basic-plugins-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-gzipUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-bash-completionUpgrade qemu-kvm-coreUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-coreUpgrade sgabiosUpgrade libvirt-client-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-dbusUpgrade virt-v2v-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-tools-cUpgrade netcfUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2-debuginfoUpgrade libguestfs-java-develUpgrade qemu-kvm-block-curlUpgrade virt-dibUpgrade python3-hivex-debuginfoUpgrade SLOFUpgrade sgabios-binUpgrade libvirt-develUpgrade nbdkit-plugin-python-commonUpgrade supermin-debuginfoUpgrade libguestfsUpgrade nbdkitUpgrade lua-guestfs-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-libsUpgrade libiscsiUpgrade libguestfs-gobjectUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemonUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libssh2-debugsourceUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-gobject-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub