A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2-debuginfo | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade nbdkit-plugin-gzipUpgrade python3-libvirtUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-man-pages-jaUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade perl-hivex-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-glusterUpgrade libguestfs-tools-cUpgrade libiscsiUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libssh2-develUpgrade libvirt-clientUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade libvirt-bash-completionUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbdUpgrade libguestfs-debuginfoUpgrade netcfUpgrade supermin-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-guest-agentUpgrade qemu-kvm-block-sshUpgrade libvirt-client-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-develUpgrade libvirt-lock-sanlockUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade python3-hivex-debuginfoUpgrade libssh2-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfsUpgrade libvirt-adminUpgrade libguestfs-bash-completionUpgrade qemu-kvmUpgrade virt-dib-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-img-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade python3-libvirt-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-winsupportUpgrade nbdkit-basic-plugins-debuginfoUpgrade libssh2-debugsourceUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-libs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-plugin-python3Upgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-commonUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-network-debuginfoUpgrade seabiosUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade virt-v2v-debuginfoUpgrade sgabios-binUpgrade netcf-develUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-vddkUpgrade sgabiosUpgrade libguestfs-java-develUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivexUpgrade nbdkit-basic-pluginsUpgrade superminUpgrade netcf-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkitUpgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libiscsi-debugsourceUpgrade libguestfs-debugsourceUpgrade supermin-develUpgrade ruby-libguestfsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade virt-dibUpgrade seavgabios-binUpgrade qemu-imgUpgrade libguestfs-gfs2Upgrade libguestfs-javaUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-example-plugins-debuginfoUpgrade hivex-debugsourceUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libssh2Upgrade libssh2-docsUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade seabios-binUpgrade qemu-kvm-debugsourceUpgrade ruby-hivexUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-plugin-xzUpgrade perl-Sys-VirtUpgrade libiscsi-develUpgrade libiscsi-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-javadocUpgrade hivex-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade virt-p2v-makerUpgrade qemu-kvm-coreUpgrade virt-v2vUpgrade perl-hivexUpgrade netcf-libsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilter | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade qemu-kvm-coreUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobject-develUpgrade libssh2-develUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-sshUpgrade qemu-guest-agentUpgrade libiscsiUpgrade nbdkit-plugin-python-commonUpgrade libiscsi-utilsUpgrade qemu-imgUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-GuestfsUpgrade nbdkit-bash-completionUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-jaUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivexUpgrade libguestfs-gobjectUpgrade nbdkit-develUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-diskUpgrade netcf-develUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade ruby-libguestfsUpgrade nbdkitUpgrade libguestfsUpgrade qemu-kvmUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade libguestfs-winsupportUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-gzipUpgrade nbdkit-basic-pluginsUpgrade virt-v2vUpgrade netcfUpgrade libiscsi-develUpgrade virt-dibUpgrade libvirt-develUpgrade superminUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javadocUpgrade hivex-develUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-xzUpgrade nbdkit-example-pluginsUpgrade libvirt-dbusUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-kvmUpgrade python3-libvirtUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-libsUpgrade libguestfs-xfsUpgrade libvirt-adminUpgrade libguestfs-gfs2Upgrade libguestfs-inspect-iconsUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade libssh2Upgrade libguestfs-rescueUpgrade seabios-binUpgrade qemu-kvm-commonUpgrade lua-guestfsUpgrade libvirt-docsUpgrade libvirt-clientUpgrade libssh2-docsUpgrade libguestfs-toolsUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-iscsiUpgrade supermin-develUpgrade libvirt-daemonUpgrade libguestfs-man-pages-ukUpgrade python3-hivexUpgrade ruby-hivexUpgrade libvirt-daemon-driver-networkUpgrade seavgabios-binUpgrade seabiosUpgrade virt-p2v-maker | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirt-docsUpgrade seavgabios-binUpgrade libvirtUpgrade libvirt-nssUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-networkUpgrade python3-libguestfsUpgrade perl-hivexUpgrade lua-guestfsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-develUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-pluginsUpgrade libguestfs-rescueUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade ruby-hivexUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsi-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-lock-sanlockUpgrade qemu-img-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcf-develUpgrade virt-dib-debuginfoUpgrade qemu-imgUpgrade hivexUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-libsUpgrade libvirt-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-glusterUpgrade seabiosUpgrade nbdkit-plugin-python-commonUpgrade ruby-hivex-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade sgabiosUpgrade perl-hivex-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-toolsUpgrade libssh2-docsUpgrade lua-guestfs-debuginfoUpgrade libvirt-debugsourceUpgrade hivex-debugsourceUpgrade python3-hivexUpgrade superminUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-Guestfs-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-nss-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-plugin-xz-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade sgabios-binUpgrade nbdkit-debuginfoUpgrade netcf-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-admin-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-debuginfoUpgrade qemu-kvmUpgrade netcf-libsUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libssh2Upgrade perl-Sys-Virt-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libssh2-debuginfoUpgrade nbdkitUpgrade virt-v2vUpgrade python3-libvirt-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade libiscsi-utilsUpgrade virt-dibUpgrade qemu-guest-agentUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-rsyncUpgrade python3-libguestfs-debuginfoUpgrade libvirt-develUpgrade libguestfs-benchmarkingUpgrade libguestfs-man-pages-ukUpgrade libvirt-dbus-debugsourceUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-debuginfoUpgrade hivex-develUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-winsupportUpgrade libguestfs-gobject-develUpgrade libssh2-debugsourceUpgrade libguestfs-javadocUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-interfaceUpgrade SLOFUpgrade libvirt-dbusUpgrade libiscsi-develUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libssh2-develUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemonUpgrade qemu-kvm-block-curlUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-commonUpgrade libvirt-adminUpgrade qemu-kvm-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade netcfUpgrade libguestfs-debugsourceUpgrade libguestfs-java-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-tools-cUpgrade python3-libvirtUpgrade seabios-binUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade hivex-debuginfoUpgrade libguestfs-devel | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1Upgrade libssh2-1-32bitUpgrade libssh2-develUpgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub