An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-docsUpgrade libssh2-develUpgrade libssh2 | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade seabios-binUpgrade nbdkit-example-pluginsUpgrade libssh2Upgrade netcf-libsUpgrade perl-hivex-debuginfoUpgrade python3-libvirtUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-bash-completionUpgrade lua-guestfsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade supermin-develUpgrade seavgabios-binUpgrade nbdkit-plugin-python3Upgrade libvirt-libs-debuginfoUpgrade libvirt-nssUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade virt-dibUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libiscsi-develUpgrade netcfUpgrade libssh2-docsUpgrade libvirt-adminUpgrade hivex-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade virt-p2v-makerUpgrade libguestfs-benchmarkingUpgrade ruby-hivex-debuginfoUpgrade python3-hivex-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-networkUpgrade sgabios-binUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2vUpgrade libvirt-docsUpgrade libguestfs-man-pages-ukUpgrade qemu-kvmUpgrade libvirt-develUpgrade libvirt-daemon-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade python3-libvirt-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-common-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-xfsUpgrade ruby-hivexUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade seabiosUpgrade nbdkit-plugin-xz-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade python3-hivexUpgrade libguestfs-javadocUpgrade superminUpgrade perl-Sys-VirtUpgrade supermin-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-clientUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-gfs2Upgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-plugin-vddkUpgrade libiscsi-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-kvmUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade libguestfs-develUpgrade nbdkit-develUpgrade sgabiosUpgrade qemu-kvm-debuginfoUpgrade libssh2-develUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbus-debugsourceUpgrade libssh2-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libiscsi-debugsourceUpgrade libiscsiUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-debuginfoUpgrade hivexUpgrade qemu-img-debuginfoUpgrade netcf-debugsourceUpgrade virt-v2v-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-java-develUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-debugsourceUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-gobject-develUpgrade nbdkitUpgrade libvirt-lock-sanlockUpgrade qemu-imgUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-guest-agentUpgrade libvirt-debugsourceUpgrade netcf-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-python-commonUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfs-winsupportUpgrade supermin-debugsourceUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-iscsiUpgrade python3-libguestfsUpgrade libguestfs-rsyncUpgrade libiscsi-utilsUpgrade libssh2-debugsourceUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirtUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-bash-completion | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade linux-c7-libssh2Upgrade libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-python-commonUpgrade python3-libguestfsUpgrade libguestfs-bash-completionUpgrade qemu-kvm-commonUpgrade sgabiosUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-develUpgrade qemu-kvm-block-sshUpgrade superminUpgrade libguestfs-rescueUpgrade lua-guestfsUpgrade perl-hivexUpgrade libssh2-develUpgrade libvirt-daemonUpgrade libvirt-bash-completionUpgrade libguestfs-toolsUpgrade libguestfs-xfsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade libiscsi-utilsUpgrade libvirtUpgrade libguestfs-inspect-iconsUpgrade nbdkit-basic-pluginsUpgrade hivexUpgrade libguestfs-gfs2Upgrade seavgabios-binUpgrade seabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-xzUpgrade virt-v2vUpgrade qemu-guest-agentUpgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade netcf-develUpgrade python3-hivexUpgrade libssh2-docsUpgrade libvirt-docsUpgrade libguestfs-develUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkitUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-man-pages-ukUpgrade libguestfs-javaUpgrade virt-p2v-makerUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade supermin-develUpgrade qemu-kvmUpgrade libiscsiUpgrade libguestfs-gobject-develUpgrade libguestfs-java-develUpgrade nbdkit-plugin-vddkUpgrade libguestfsUpgrade libssh2Upgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rsyncUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gobjectUpgrade libguestfs-winsupportUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-VirtUpgrade nbdkit-example-pluginsUpgrade seabios-binUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade libiscsi-develUpgrade python3-libvirtUpgrade qemu-kvm-coreUpgrade netcf-libsUpgrade ruby-hivexUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javadocUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade hivex-develUpgrade libguestfs-tools-cUpgrade libvirt-develUpgrade qemu-imgUpgrade netcfUpgrade nbdkit-plugin-gzip | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade netcf-debuginfoUpgrade libssh2-develUpgrade libvirt-bash-completionUpgrade libiscsi-utilsUpgrade libguestfs-rsyncUpgrade virt-v2v-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-storageUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-tools-cUpgrade nbdkit-plugin-python-commonUpgrade qemu-guest-agentUpgrade sgabiosUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-java-develUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-develUpgrade libvirt-client-debuginfoUpgrade netcfUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-bash-completionUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libiscsiUpgrade libvirt-libsUpgrade libguestfs-gobject-develUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-python3Upgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-dbusUpgrade libvirt-debugsourceUpgrade qemu-kvm-coreUpgrade perl-Sys-VirtUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-debuginfoUpgrade nbdkitUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-gzipUpgrade SLOFUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-daemon-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-gobjectUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade virt-dibUpgrade libguestfs-man-pages-jaUpgrade nbdkit-debuginfoUpgrade libvirt-adminUpgrade python3-hivex-debuginfoUpgrade libguestfs-javaUpgrade qemu-kvm-block-sshUpgrade nbdkit-bash-completionUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-lock-sanlockUpgrade virt-dib-debuginfoUpgrade libvirt-daemonUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade supermin-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade netcf-libsUpgrade ruby-libguestfsUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-tools-c-debuginfoUpgrade python3-libvirtUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-commonUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-xfsUpgrade libiscsi-develUpgrade libvirt-nss-debuginfoUpgrade libguestfs-javadocUpgrade hivexUpgrade qemu-kvmUpgrade libvirt-nssUpgrade nbdkit-develUpgrade seabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade seabiosUpgrade libguestfs-toolsUpgrade libguestfs-gfs2Upgrade seavgabios-binUpgrade perl-hivexUpgrade qemu-kvm-block-ssh-debuginfoUpgrade hivex-develUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-imgUpgrade netcf-libs-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libssh2Upgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-rescueUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade nbdkit-basic-pluginsUpgrade libssh2-docsUpgrade libvirt-lock-sanlock-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-gzip-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-kvmUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-v2vUpgrade libguestfs-debugsourceUpgrade lua-guestfsUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-docsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirtUpgrade qemu-kvm-debugsourceUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-debugsourceUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade supermin-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-hivexUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-vddkUpgrade virt-p2v-makerUpgrade ruby-hivex-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-develUpgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub