An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2 | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade hivex-debuginfoUpgrade netcfUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-iscsiUpgrade superminUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade ruby-hivexUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-inspect-iconsUpgrade lua-guestfsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade hivex-debugsourceUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade virt-p2v-makerUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade python3-hivexUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-curlUpgrade seabiosUpgrade libvirt-adminUpgrade seabios-binUpgrade python3-libvirtUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-kvmUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nss-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-debugsourceUpgrade seavgabios-binUpgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade libvirt-daemon-debuginfoUpgrade libiscsi-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-debuginfoUpgrade netcf-libsUpgrade libvirt-develUpgrade libiscsi-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade python3-hivex-debuginfoUpgrade virt-v2vUpgrade libvirt-docsUpgrade perl-Sys-VirtUpgrade supermin-develUpgrade libvirt-libs-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-network-debuginfoUpgrade ruby-hivex-debuginfoUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-block-glusterUpgrade hivex-develUpgrade perl-hivex-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-commonUpgrade perl-hivexUpgrade perl-Sys-Virt-debuginfoUpgrade libssh2-docsUpgrade qemu-kvmUpgrade libguestfs-java-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade perl-Sys-GuestfsUpgrade libguestfsUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-v2v-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-debugsourceUpgrade lua-guestfs-debuginfoUpgrade nbdkitUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade nbdkit-develUpgrade libiscsi-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-lock-sanlockUpgrade virt-dib-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade libguestfs-rescueUpgrade libguestfs-gobjectUpgrade libguestfs-debuginfoUpgrade libssh2-debugsourceUpgrade nbdkit-bash-completionUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-libsUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gobject-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-winsupportUpgrade libguestfs-rsyncUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-guest-agentUpgrade nbdkit-plugin-python-commonUpgrade netcf-debuginfoUpgrade qemu-kvm-block-rbdUpgrade nbdkit-basic-pluginsUpgrade hivexUpgrade nbdkit-plugin-gzipUpgrade netcf-debugsourceUpgrade qemu-img-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade lua-guestfsUpgrade perl-hivexUpgrade qemu-guest-agentUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-xzUpgrade nbdkit-basic-pluginsUpgrade libvirtUpgrade seavgabios-binUpgrade seabiosUpgrade libguestfs-inspect-iconsUpgrade libiscsi-utilsUpgrade perl-Sys-GuestfsUpgrade superminUpgrade python3-libguestfsUpgrade hivexUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nssUpgrade libssh2-docsUpgrade netcf-develUpgrade ruby-libguestfsUpgrade python3-hivexUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-clientUpgrade qemu-kvm-block-rbdUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-curlUpgrade virt-v2vUpgrade libvirt-bash-completionUpgrade sgabiosUpgrade libguestfs-toolsUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-develUpgrade libvirt-daemonUpgrade qemu-kvm-block-glusterUpgrade libiscsi-develUpgrade seabios-binUpgrade libguestfs-tools-cUpgrade libvirt-lock-sanlockUpgrade libvirt-docsUpgrade sgabios-binUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-dibUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade libssh2Upgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvmUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-java-develUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-kvmUpgrade supermin-develUpgrade nbdkit-bash-completionUpgrade virt-p2v-makerUpgrade libvirt-develUpgrade hivex-develUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-winsupportUpgrade libguestfs-javadocUpgrade libguestfsUpgrade perl-Sys-VirtUpgrade python3-libvirtUpgrade qemu-kvm-coreUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-adminUpgrade libiscsiUpgrade libguestfs-javaUpgrade netcfUpgrade libvirt-libsUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-secretUpgrade nbdkitUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-imgUpgrade libguestfs-rsyncUpgrade ruby-hivexUpgrade qemu-kvm-block-iscsi | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade netcf-libs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-nssUpgrade qemu-imgUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade hivex-develUpgrade libvirtUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade superminUpgrade perl-hivex-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nodedevUpgrade hivex-debugsourceUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libssh2Upgrade libvirt-debuginfoUpgrade nbdkit-develUpgrade libguestfs-rescueUpgrade libvirt-admin-debuginfoUpgrade libvirt-nss-debuginfoUpgrade seabiosUpgrade libssh2-docsUpgrade libvirt-clientUpgrade libguestfs-toolsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade netcf-develUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-docsUpgrade supermin-develUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvmUpgrade hivexUpgrade libguestfs-javadocUpgrade libvirt-daemon-config-nwfilterUpgrade seavgabios-binUpgrade libguestfs-java-debuginfoUpgrade libiscsi-develUpgrade netcf-libsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-p2v-makerUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libiscsi-debugsourceUpgrade perl-Sys-GuestfsUpgrade nbdkit-debugsourceUpgrade python3-libvirtUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-python3-debuginfoUpgrade perl-hivexUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libs-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-config-networkUpgrade virt-v2vUpgrade hivex-debuginfoUpgrade ruby-hivexUpgrade libguestfs-gfs2Upgrade python3-hivexUpgrade seabios-binUpgrade libguestfs-gobjectUpgrade libguestfs-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-gobject-develUpgrade libvirt-develUpgrade qemu-img-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libssh2-develUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-v2v-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-java-develUpgrade supermin-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade netcfUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-debuginfoUpgrade sgabiosUpgrade libguestfs-tools-cUpgrade libiscsi-utils-debuginfoUpgrade libguestfsUpgrade SLOFUpgrade qemu-kvm-block-curlUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade python3-libguestfsUpgrade libguestfs-winsupportUpgrade netcf-debugsourceUpgrade qemu-kvm-coreUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-python3Upgrade libguestfs-bash-completionUpgrade libguestfs-javaUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-debuginfoUpgrade sgabios-binUpgrade virt-dibUpgrade libiscsiUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-libsUpgrade libvirt-lock-sanlockUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-Virt-debugsourceUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-bash-completionUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-dib-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libiscsi-utilsUpgrade nbdkit-debuginfoUpgrade libvirt-admin | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub