An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2-devel | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade supermin-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade perl-hivexUpgrade libvirt-clientUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade python3-hivexUpgrade seabiosUpgrade supermin-develUpgrade libguestfs-java-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-dbusUpgrade perl-hivex-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-libs-debuginfoUpgrade perl-Sys-VirtUpgrade libssh2-docsUpgrade seabios-binUpgrade nbdkit-example-pluginsUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-javadocUpgrade libguestfs-xfsUpgrade netcf-libsUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libssh2Upgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade seavgabios-binUpgrade hivex-debuginfoUpgrade lua-guestfsUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-adminUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-networkUpgrade virt-dibUpgrade virt-v2vUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-xzUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-debuginfoUpgrade netcfUpgrade ruby-hivex-debuginfoUpgrade ruby-hivexUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-benchmarkingUpgrade sgabios-binUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-man-pages-ukUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-docsUpgrade python3-libguestfs-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-vddkUpgrade hivex-debugsourceUpgrade libvirt-admin-debuginfoUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemonUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-nssUpgrade libguestfs-gfs2Upgrade superminUpgrade qemu-kvm-core-debuginfoUpgrade hivex-develUpgrade virt-p2v-makerUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-toolsUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-imgUpgrade python3-libguestfsUpgrade libvirt-debugsourceUpgrade nbdkit-bash-completionUpgrade supermin-debugsourceUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-winsupportUpgrade libssh2-debugsourceUpgrade libguestfs-java-develUpgrade qemu-kvm-debuginfoUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libssh2-develUpgrade nbdkit-debugsourceUpgrade lua-guestfs-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libguestfsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkitUpgrade sgabiosUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-client-debuginfoUpgrade libiscsi-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libiscsiUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirtUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-debuginfoUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade netcf-develUpgrade libguestfs-tools-cUpgrade virt-dib-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-gobject-develUpgrade libguestfs-gobjectUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-basic-pluginsUpgrade qemu-img-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-rbdUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-gzipUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade ruby-libguestfsUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-rsync | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade libguestfs-javadocUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade libguestfs-winsupportUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-docsUpgrade libvirt-develUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade ruby-hivexUpgrade libguestfs-javaUpgrade libvirt-dbusUpgrade libvirt-libsUpgrade qemu-imgUpgrade nbdkitUpgrade libvirt-daemon-driver-nwfilterUpgrade netcfUpgrade nbdkit-plugin-gzipUpgrade libvirt-adminUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-man-pages-ukUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-coreUpgrade hivex-develUpgrade nbdkit-bash-completionUpgrade libguestfs-gobject-develUpgrade libguestfs-java-develUpgrade libiscsiUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade seabios-binUpgrade libiscsi-develUpgrade virt-dibUpgrade libguestfs-gobjectUpgrade libguestfs-rsyncUpgrade libvirt-daemon-config-networkUpgrade libguestfs-develUpgrade netcf-libsUpgrade python3-libvirtUpgrade virt-p2v-makerUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-interfaceUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-kvmUpgrade libguestfs-benchmarkingUpgrade libssh2Upgrade libvirt-daemon-driver-storageUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-logicalUpgrade lua-guestfsUpgrade nbdkit-develUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-python-commonUpgrade seabiosUpgrade nbdkit-basic-pluginsUpgrade libvirtUpgrade libiscsi-utilsUpgrade libguestfs-inspect-iconsUpgrade seavgabios-binUpgrade qemu-guest-agentUpgrade perl-Sys-GuestfsUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-xzUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libssh2-develUpgrade virt-v2vUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-rbdUpgrade libvirt-clientUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade superminUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-coreUpgrade hivexUpgrade libguestfs-toolsUpgrade libguestfs-gfs2Upgrade libguestfs-xfsUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade qemu-kvm-block-curlUpgrade ruby-libguestfsUpgrade netcf-develUpgrade libvirt-nssUpgrade libssh2-docsUpgrade python3-hivex | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-kvmUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade ruby-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-rescueUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade ruby-hivexUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libs-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-xfsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-java-debuginfoUpgrade hivexUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-develUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-glusterUpgrade python3-libvirtUpgrade libvirt-nss-debuginfoUpgrade qemu-kvmUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-basic-pluginsUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-debugsourceUpgrade libguestfs-gfs2Upgrade nbdkit-develUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-core-debuginfoUpgrade seabiosUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-commonUpgrade seabios-binUpgrade libvirt-debuginfoUpgrade libguestfs-javadocUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade hivex-debugsourceUpgrade netcf-libsUpgrade libguestfs-benchmarkingUpgrade qemu-imgUpgrade netcf-libs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade netcf-develUpgrade perl-hivex-debuginfoUpgrade libssh2Upgrade libguestfs-toolsUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-python3-debuginfoUpgrade virt-p2v-makerUpgrade hivex-develUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-storage-logicalUpgrade supermin-develUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-secretUpgrade perl-hivexUpgrade lua-guestfsUpgrade libguestfs-debugsourceUpgrade perl-Sys-GuestfsUpgrade libvirtUpgrade nbdkit-example-plugins-debuginfoUpgrade libiscsiUpgrade libvirt-bash-completionUpgrade libguestfs-winsupportUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-java-develUpgrade netcfUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-debuginfoUpgrade libvirt-libsUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-man-pages-ukUpgrade libguestfs-gobject-develUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-glusterUpgrade supermin-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libssh2-develUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-rbdUpgrade libguestfs-man-pages-jaUpgrade nbdkit-example-pluginsUpgrade libssh2-debugsourceUpgrade libguestfsUpgrade nbdkit-bash-completionUpgrade qemu-img-debuginfoUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-VirtUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfs-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade SLOFUpgrade nbdkitUpgrade ruby-libguestfs-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade python3-libguestfsUpgrade libvirt-debugsourceUpgrade python3-libvirt-debuginfoUpgrade libguestfs-debuginfoUpgrade virt-dibUpgrade supermin-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-javaUpgrade libguestfs-rsyncUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-develUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-python3Upgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-vddk-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-dbusUpgrade libguestfs-tools-cUpgrade sgabiosUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-gluster-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub