An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-docsUpgrade libssh2Upgrade libssh2-develUpgrade libssh2-debuginfo | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libiscsi-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-coreUpgrade libvirt-docsUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-client-debuginfoUpgrade python3-libvirtUpgrade libvirt-debugsourceUpgrade qemu-kvmUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-basic-pluginsUpgrade netcf-libs-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade virt-v2v-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-libs-debuginfoUpgrade hivex-debugsourceUpgrade lua-guestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-benchmarkingUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-javaUpgrade libguestfs-gobject-develUpgrade libguestfs-winsupportUpgrade libvirtUpgrade netcf-develUpgrade libvirt-nssUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-block-rbdUpgrade ruby-hivexUpgrade ruby-libguestfsUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade ruby-hivex-debuginfoUpgrade libguestfsUpgrade libguestfs-gobjectUpgrade perl-hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade seavgabios-binUpgrade libvirt-lock-sanlockUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade hivexUpgrade qemu-kvm-block-ssh-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-gzipUpgrade nbdkit-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libiscsiUpgrade qemu-kvm-block-sshUpgrade libssh2Upgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-imgUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade supermin-debuginfoUpgrade netcfUpgrade qemu-kvm-block-iscsiUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-block-curlUpgrade libguestfs-gfs2Upgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-rescueUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkitUpgrade libvirt-clientUpgrade libiscsi-utilsUpgrade supermin-develUpgrade sgabios-binUpgrade libguestfs-toolsUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade libssh2-docsUpgrade libguestfs-xfsUpgrade nbdkit-example-pluginsUpgrade libvirt-develUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-admin-debuginfoUpgrade python3-libguestfsUpgrade qemu-img-debuginfoUpgrade python3-hivexUpgrade netcf-debugsourceUpgrade virt-p2v-makerUpgrade libvirt-dbusUpgrade qemu-kvm-commonUpgrade sgabiosUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-guest-agentUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-javadocUpgrade nbdkit-bash-completionUpgrade superminUpgrade qemu-kvm-common-debuginfoUpgrade libiscsi-develUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-plugin-gzip-debuginfoUpgrade hivex-develUpgrade libguestfs-rsyncUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-adminUpgrade nbdkit-plugin-xzUpgrade libssh2-develUpgrade libiscsi-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-develUpgrade libguestfs-debugsourceUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libssh2-debuginfoUpgrade libvirt-libsUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade seabiosUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-libvirt-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libguestfs-toolsUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobjectUpgrade lua-guestfsUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade seabiosUpgrade python3-libguestfsUpgrade virt-v2vUpgrade libguestfs-rescueUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-xfsUpgrade nbdkit-basic-pluginsUpgrade nbdkit-develUpgrade libguestfs-inspect-iconsUpgrade libvirt-docsUpgrade qemu-kvmUpgrade ruby-hivexUpgrade perl-hivexUpgrade qemu-imgUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-diskUpgrade netcf-develUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade libiscsi-develUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-javadocUpgrade virt-p2v-makerUpgrade libguestfs-gfs2Upgrade libssh2-docsUpgrade libvirt-clientUpgrade libvirtUpgrade libvirt-daemon-kvmUpgrade python3-hivexUpgrade python3-libvirtUpgrade hivexUpgrade supermin-develUpgrade superminUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-xzUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade seavgabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-glusterUpgrade libguestfs-bash-completionUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-libsUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agentUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rsyncUpgrade hivex-develUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsiUpgrade qemu-kvm-block-sshUpgrade libssh2Upgrade libvirt-libsUpgrade netcfUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libguestfs-winsupportUpgrade sgabios-binUpgrade virt-dibUpgrade sgabiosUpgrade nbdkitUpgrade libguestfs-java-develUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-javaUpgrade libguestfs-tools-cUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-ukUpgrade libguestfsUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-gzipUpgrade libvirt-adminUpgrade libguestfs-man-pages-jaUpgrade libguestfs-develUpgrade libiscsi-utilsUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-python3 | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade python3-libvirtUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-adminUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-curlUpgrade libssh2-debugsourceUpgrade libguestfs-gobjectUpgrade supermin-debuginfoUpgrade libvirt-daemon-config-networkUpgrade python3-libvirt-debuginfoUpgrade seabiosUpgrade libvirt-client-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-winsupportUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-debugsourceUpgrade qemu-kvmUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivexUpgrade libiscsi-utilsUpgrade nbdkit-develUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python3Upgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade lua-guestfsUpgrade ruby-hivex-debuginfoUpgrade netcf-libsUpgrade libssh2-develUpgrade libvirt-clientUpgrade libvirt-libs-debuginfoUpgrade perl-hivex-debuginfoUpgrade python3-hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade hivex-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirtUpgrade hivex-develUpgrade supermin-develUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade virt-dib-debuginfoUpgrade libvirt-develUpgrade qemu-imgUpgrade libiscsi-develUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-man-pages-ukUpgrade qemu-guest-agentUpgrade libguestfs-gobject-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade SLOFUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarkingUpgrade libvirt-bash-completionUpgrade libvirt-daemon-kvmUpgrade netcfUpgrade qemu-guest-agent-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade libiscsiUpgrade seabios-binUpgrade virt-p2v-makerUpgrade libssh2-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-dbusUpgrade nbdkit-bash-completionUpgrade libssh2Upgrade netcf-libs-debuginfoUpgrade libguestfs-gfs2Upgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-commonUpgrade libssh2-docsUpgrade libvirt-daemonUpgrade libguestfs-toolsUpgrade qemu-kvm-block-sshUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade sgabiosUpgrade libguestfs-javadocUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade seavgabios-binUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-VirtUpgrade sgabios-binUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade qemu-kvm-debuginfoUpgrade libvirt-libsUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-hivexUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-javaUpgrade python3-libguestfsUpgrade libguestfs-xfsUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-debugsourceUpgrade virt-v2vUpgrade supermin-debugsourceUpgrade virt-v2v-debuginfoUpgrade netcf-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-rsyncUpgrade libvirt-docsUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-debugsourceUpgrade perl-hivexUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-java-debuginfoUpgrade superminUpgrade perl-Sys-GuestfsUpgrade libguestfs-rescueUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1Upgrade libssh2-1-32bitUpgrade libssh2-1-x86Upgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub