An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-debuginfoUpgrade libssh2Upgrade libssh2-docs | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade libvirt-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-imgUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade hivexUpgrade libguestfs-gobject-develUpgrade nbdkit-basic-pluginsUpgrade libguestfsUpgrade libvirt-dbus-debugsourceUpgrade libssh2-debugsourceUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-nodedevUpgrade libssh2-debuginfoUpgrade libiscsi-utilsUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-iscsiUpgrade netcf-libs-debuginfoUpgrade nbdkitUpgrade qemu-kvm-debuginfoUpgrade libvirt-libsUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-develUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-debugsourceUpgrade perl-Sys-Guestfs-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-bash-completionUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade libvirt-client-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade ruby-libguestfsUpgrade libguestfs-gobjectUpgrade libvirt-debuginfoUpgrade nbdkit-develUpgrade libiscsi-debugsourceUpgrade libguestfs-winsupportUpgrade libguestfs-java-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-GuestfsUpgrade libssh2-develUpgrade nbdkit-plugin-gzipUpgrade libguestfs-develUpgrade libvirtUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-coreUpgrade python3-libguestfsUpgrade supermin-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-nss-debuginfoUpgrade netcf-libsUpgrade seavgabios-binUpgrade python3-libvirt-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-debuginfoUpgrade libvirt-docsUpgrade supermin-debuginfoUpgrade libguestfs-javaUpgrade libvirt-libs-debuginfoUpgrade perl-Sys-VirtUpgrade libssh2-docsUpgrade libvirt-develUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade superminUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade ruby-hivex-debuginfoUpgrade virt-p2v-makerUpgrade sgabios-binUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade virt-v2vUpgrade nbdkit-plugin-xzUpgrade netcfUpgrade nbdkit-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-secretUpgrade python3-libvirtUpgrade seabiosUpgrade nbdkit-example-pluginsUpgrade libvirt-dbus-debuginfoUpgrade seabios-binUpgrade perl-hivex-debuginfoUpgrade python3-hivexUpgrade libguestfs-java-debuginfoUpgrade libvirt-dbusUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-admin-debuginfoUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-curlUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-debugsourceUpgrade libiscsi-debuginfoUpgrade libguestfs-gfs2Upgrade perl-hivexUpgrade virt-dibUpgrade nbdkit-example-plugins-debuginfoUpgrade hivex-develUpgrade libguestfs-xfsUpgrade qemu-kvm-commonUpgrade libiscsi-develUpgrade libvirt-daemonUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-config-nwfilterUpgrade ruby-hivexUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade supermin-develUpgrade libssh2Upgrade hivex-debuginfoUpgrade libguestfs-bash-completionUpgrade qemu-kvmUpgrade lua-guestfsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-python3 | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade linux-c7-libssh2Upgrade libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade libguestfs-man-pages-jaUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade qemu-imgUpgrade netcfUpgrade netcf-libsUpgrade libguestfs-develUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsi-develUpgrade supermin-develUpgrade virt-p2v-makerUpgrade qemu-kvmUpgrade libvirt-libsUpgrade libiscsiUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-gobject-develUpgrade libguestfs-java-develUpgrade nbdkitUpgrade virt-dibUpgrade libguestfs-javadocUpgrade libguestfs-winsupportUpgrade perl-Sys-VirtUpgrade libguestfsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-iscsiUpgrade ruby-hivexUpgrade libvirt-docsUpgrade sgabios-binUpgrade libssh2Upgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-rsyncUpgrade hivex-develUpgrade libvirt-develUpgrade libvirt-adminUpgrade python3-libvirtUpgrade libguestfs-tools-cUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-gzipUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-vddkUpgrade libiscsi-utilsUpgrade libguestfs-gfs2Upgrade seabiosUpgrade lua-guestfsUpgrade nbdkit-basic-pluginsUpgrade libguestfs-inspect-iconsUpgrade libvirtUpgrade hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade libvirt-clientUpgrade superminUpgrade qemu-kvm-block-sshUpgrade libvirt-bash-completionUpgrade libguestfs-toolsUpgrade qemu-kvm-block-curlUpgrade libvirt-daemonUpgrade nbdkit-develUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade netcf-develUpgrade libvirt-nssUpgrade python3-hivexUpgrade libvirt-daemon-driver-networkUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2-docsUpgrade qemu-kvm-block-glusterUpgrade qemu-guest-agentUpgrade perl-Sys-GuestfsUpgrade perl-hivexUpgrade libssh2-develUpgrade virt-v2vUpgrade nbdkit-plugin-xzUpgrade seavgabios-binUpgrade sgabiosUpgrade libvirt-daemon-driver-nodedevUpgrade python3-libguestfsUpgrade nbdkit-plugin-python-common | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade nbdkit-plugin-xzUpgrade seabios-binUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade virt-v2vUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsi-develUpgrade libguestfs-javadocUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade hivexUpgrade libguestfs-gfs2Upgrade nbdkit-basic-pluginsUpgrade perl-Sys-GuestfsUpgrade virt-p2v-makerUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade seavgabios-binUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-debugsourceUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade netcf-develUpgrade ruby-hivexUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-imgUpgrade netcf-libs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libssh2Upgrade libvirt-daemon-kvmUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade superminUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-docsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-vddkUpgrade lua-guestfsUpgrade libguestfs-rescueUpgrade seabiosUpgrade netcf-libsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade hivex-develUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvmUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade libvirt-nssUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-hivexUpgrade perl-Sys-Virt-debugsourceUpgrade virt-dib-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvm-common-debuginfoUpgrade libiscsiUpgrade libvirt-libsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-guest-agentUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade ruby-libguestfs-debuginfoUpgrade libssh2-debugsourceUpgrade libguestfs-tools-cUpgrade libvirt-dbusUpgrade virt-dibUpgrade libguestfs-gobjectUpgrade supermin-debuginfoUpgrade sgabios-binUpgrade libvirt-debugsourceUpgrade libguestfs-javaUpgrade python3-hivex-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade netcf-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-debuginfoUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfs-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-python3Upgrade nbdkit-example-plugins-debuginfoUpgrade netcfUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade libiscsi-utilsUpgrade libssh2-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libssh2-develUpgrade qemu-kvm-coreUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkitUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-adminUpgrade python3-libguestfsUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemonUpgrade qemu-kvm-block-sshUpgrade netcf-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade sgabiosUpgrade SLOFUpgrade nbdkit-plugin-gzipUpgrade libiscsi-utils-debuginfoUpgrade libguestfsUpgrade nbdkit-bash-completionUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-develUpgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub