An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2-devel | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-dbus-debugsourceUpgrade libvirt-clientUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade virt-v2vUpgrade hivex-debugsourceUpgrade ruby-hivexUpgrade libguestfs-tools-c-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-xfsUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-docsUpgrade netcf-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-commonUpgrade nbdkit-basic-pluginsUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-javadocUpgrade libvirt-libsUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-qemuUpgrade qemu-imgUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-toolsUpgrade seabiosUpgrade libssh2-docsUpgrade sgabiosUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsi-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade libssh2Upgrade libvirt-admin-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade superminUpgrade libvirt-libs-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-networkUpgrade netcf-libs-debuginfoUpgrade hivexUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-dibUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-coreUpgrade supermin-develUpgrade netcf-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade hivex-develUpgrade nbdkit-debugsourceUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-vddkUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nss-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-nwfilterUpgrade virt-p2v-makerUpgrade lua-guestfsUpgrade hivex-debuginfoUpgrade libguestfs-gfs2Upgrade qemu-kvm-core-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfsUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade netcf-libsUpgrade qemu-kvm-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libssh2-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-debugsourceUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade python3-libguestfsUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-develUpgrade netcf-debugsourceUpgrade libvirt-develUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemonUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-winsupportUpgrade libguestfs-benchmarkingUpgrade libvirt-dbus-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-block-curl-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-guest-agentUpgrade lua-guestfs-debuginfoUpgrade libiscsi-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade libiscsiUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade python3-hivexUpgrade nbdkitUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curlUpgrade libguestfs-bash-completionUpgrade virt-dib-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-rescueUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade perl-Sys-Virt-debugsourceUpgrade netcfUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-gzipUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade supermin-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libssh2-debugsourceUpgrade libiscsi-utils | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade nbdkit-develUpgrade qemu-imgUpgrade nbdkit-plugin-gzipUpgrade libvirt-nssUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storageUpgrade virt-p2v-makerUpgrade seabios-binUpgrade nbdkit-plugin-python3Upgrade libguestfs-winsupportUpgrade libguestfs-inspect-iconsUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvmUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-lock-sanlockUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libiscsi-develUpgrade virt-dibUpgrade libvirt-clientUpgrade libguestfsUpgrade libguestfs-gobject-develUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-qemuUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade seabiosUpgrade supermin-develUpgrade libvirt-bash-completionUpgrade libvirt-daemon-kvmUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-libsUpgrade netcfUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curlUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-secretUpgrade lua-guestfsUpgrade libssh2-develUpgrade hivexUpgrade hivex-develUpgrade ruby-libguestfsUpgrade qemu-kvm-coreUpgrade nbdkit-bash-completionUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade libguestfs-bash-completionUpgrade superminUpgrade qemu-kvm-block-iscsiUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirtUpgrade libguestfs-gfs2Upgrade seavgabios-binUpgrade qemu-kvm-commonUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-coreUpgrade sgabios-binUpgrade ruby-hivexUpgrade nbdkitUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-VirtUpgrade libguestfs-tools-cUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade qemu-kvm-block-sshUpgrade libssh2Upgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-vddkUpgrade virt-v2vUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rescueUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-develUpgrade libssh2-docsUpgrade libguestfs-xfsUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-adminUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade libguestfs-javadocUpgrade sgabios | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade supermin-debugsourceUpgrade libvirtUpgrade netcf-develUpgrade libssh2Upgrade virt-v2v-debuginfoUpgrade python3-libvirt-debuginfoUpgrade seavgabios-binUpgrade supermin-develUpgrade libiscsi-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python3Upgrade netcfUpgrade libvirt-daemon-driver-secretUpgrade libssh2-docsUpgrade nbdkitUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade ruby-hivexUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-develUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade hivex-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-debuginfoUpgrade nbdkit-example-pluginsUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-debugsourceUpgrade perl-hivexUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-toolsUpgrade perl-Sys-Virt-debuginfoUpgrade superminUpgrade perl-Sys-VirtUpgrade libguestfs-java-develUpgrade lua-guestfsUpgrade libguestfs-javadocUpgrade libvirt-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade virt-p2v-makerUpgrade libguestfs-java-debuginfoUpgrade libvirt-adminUpgrade netcf-debuginfoUpgrade sgabios-binUpgrade nbdkit-plugin-xzUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-kvmUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade supermin-debuginfoUpgrade perl-Sys-GuestfsUpgrade seabiosUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-xfsUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-gfs2Upgrade nbdkit-debuginfoUpgrade sgabiosUpgrade libvirt-docsUpgrade python3-libguestfsUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-core-debuginfoUpgrade libiscsi-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-bash-completionUpgrade libvirt-daemonUpgrade python3-hivexUpgrade libvirt-nssUpgrade libvirt-develUpgrade libvirt-client-debuginfoUpgrade libguestfs-gobjectUpgrade virt-dib-debuginfoUpgrade qemu-kvm-debugsourceUpgrade ruby-libguestfsUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade hivex-develUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-sshUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-debugsourceUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-lock-sanlockUpgrade libguestfs-inspect-iconsUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade SLOFUpgrade netcf-debugsourceUpgrade qemu-kvm-coreUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-hivex-debuginfoUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-javaUpgrade libiscsi-debugsourceUpgrade libguestfs-benchmarkingUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-curlUpgrade libvirt-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsiUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-tools-cUpgrade python3-libguestfs-debuginfoUpgrade lua-guestfs-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-dbusUpgrade libguestfs-man-pages-jaUpgrade libssh2-debugsourceUpgrade libvirt-clientUpgrade hivexUpgrade libvirt-daemon-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libs-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfsUpgrade libssh2-develUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-rsyncUpgrade qemu-kvmUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-img | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bitUpgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub