An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2 | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade sgabiosUpgrade nbdkit-basic-pluginsUpgrade libguestfs-tools-cUpgrade libguestfs-rsyncUpgrade libiscsi-debugsourceUpgrade nbdkit-develUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-GuestfsUpgrade netcf-debugsourceUpgrade netcf-libs-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-img-debuginfoUpgrade libiscsi-utilsUpgrade virt-v2v-debuginfoUpgrade python3-libguestfsUpgrade netcf-develUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-java-develUpgrade libguestfs-rescueUpgrade ruby-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfsUpgrade libvirtUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade nbdkitUpgrade libguestfs-gobject-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-client-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade hivexUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-debugsourceUpgrade libvirt-debugsourceUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-imgUpgrade libguestfs-man-pages-jaUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade virt-dib-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-debugsourceUpgrade qemu-guest-agentUpgrade libssh2-develUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-winsupportUpgrade qemu-kvm-coreUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade superminUpgrade ruby-hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade hivex-debugsourceUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvmUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-config-networkUpgrade perl-hivexUpgrade supermin-develUpgrade libvirt-libs-debuginfoUpgrade hivex-develUpgrade perl-Sys-VirtUpgrade supermin-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade libvirt-daemonUpgrade virt-dibUpgrade libguestfs-benchmarkingUpgrade libvirt-docsUpgrade nbdkit-example-pluginsUpgrade python3-libvirtUpgrade perl-hivex-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade virt-v2vUpgrade nbdkit-plugin-vddkUpgrade libvirt-adminUpgrade ruby-libguestfs-debuginfoUpgrade hivex-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade lua-guestfsUpgrade nbdkit-plugin-xz-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade seabios-binUpgrade libssh2Upgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-bash-completionUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-admin-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-develUpgrade seavgabios-binUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-python3Upgrade libguestfs-man-pages-ukUpgrade ruby-hivexUpgrade libssh2-docsUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-kvmUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javadocUpgrade libvirt-clientUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-tools-c-debuginfoUpgrade python3-hivexUpgrade virt-p2v-makerUpgrade sgabios-binUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade seabiosUpgrade libvirt-dbusUpgrade nbdkit-debuginfoUpgrade python3-hivex-debuginfoUpgrade netcf | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade superminUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-rbdUpgrade netcf-develUpgrade libvirt-bash-completionUpgrade libguestfs-bash-completionUpgrade lua-guestfsUpgrade perl-hivexUpgrade libvirt-nssUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-xzUpgrade libvirt-daemonUpgrade virt-v2vUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-xfsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-python-commonUpgrade python3-libguestfsUpgrade python3-hivexUpgrade nbdkit-develUpgrade libssh2-docsUpgrade seavgabios-binUpgrade libguestfs-toolsUpgrade qemu-guest-agentUpgrade ruby-libguestfsUpgrade libguestfs-inspect-iconsUpgrade libiscsi-utilsUpgrade libvirtUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-rbdUpgrade seabiosUpgrade qemu-kvm-commonUpgrade nbdkit-basic-pluginsUpgrade sgabiosUpgrade hivexUpgrade libguestfs-gfs2Upgrade virt-dibUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-secretUpgrade nbdkitUpgrade qemu-imgUpgrade libvirt-libsUpgrade libguestfs-develUpgrade libiscsiUpgrade supermin-develUpgrade libvirt-docsUpgrade ruby-hivexUpgrade qemu-kvm-block-iscsiUpgrade python3-libvirtUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libvirt-develUpgrade sgabios-binUpgrade hivex-develUpgrade libguestfs-tools-cUpgrade qemu-kvm-coreUpgrade netcfUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-dbusUpgrade libguestfs-man-pages-ukUpgrade virt-p2v-makerUpgrade nbdkit-bash-completionUpgrade libguestfs-java-develUpgrade libguestfs-gobject-develUpgrade libvirt-lock-sanlockUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade seabios-binUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-vddkUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-man-pages-jaUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javadocUpgrade libguestfs-winsupportUpgrade libguestfsUpgrade perl-Sys-VirtUpgrade libssh2Upgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvm | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade ruby-libguestfsUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-debugsourceUpgrade python3-hivexUpgrade libiscsi-debugsourceUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade hivex-develUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-libsUpgrade netcf-libs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade netcf-develUpgrade qemu-imgUpgrade libvirt-daemon-driver-secretUpgrade perl-hivex-debuginfoUpgrade superminUpgrade virt-p2v-makerUpgrade qemu-kvm-commonUpgrade libvirt-nssUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-javadocUpgrade libvirt-nss-debuginfoUpgrade libssh2Upgrade perl-Sys-GuestfsUpgrade libvirt-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-network-debuginfoUpgrade hivexUpgrade nbdkit-develUpgrade libvirt-daemon-driver-interfaceUpgrade hivex-debugsourceUpgrade perl-hivexUpgrade libguestfs-java-debuginfoUpgrade libvirt-admin-debuginfoUpgrade supermin-develUpgrade virt-v2vUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade perl-Sys-Guestfs-debuginfoUpgrade libiscsi-develUpgrade seabios-binUpgrade libguestfs-xfsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-debuginfoUpgrade libssh2-docsUpgrade lua-guestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libvirtUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvmUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade nbdkit-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-glusterUpgrade libguestfs-gfs2Upgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade ruby-hivexUpgrade seabiosUpgrade libvirt-client-debuginfoUpgrade libvirt-develUpgrade virt-dibUpgrade sgabios-binUpgrade libguestfs-debuginfoUpgrade perl-Sys-VirtUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemonUpgrade sgabiosUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-libsUpgrade libiscsiUpgrade libguestfs-winsupportUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkitUpgrade qemu-kvm-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-javaUpgrade python3-hivex-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfs-bash-completionUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade lua-guestfs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfsUpgrade libiscsi-utils-debuginfoUpgrade SLOFUpgrade nbdkit-plugin-gzipUpgrade nbdkit-debuginfoUpgrade virt-v2v-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-debugsourceUpgrade libguestfs-gobjectUpgrade nbdkit-plugin-python-commonUpgrade supermin-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-develUpgrade netcfUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade netcf-debugsourceUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-common-debuginfoUpgrade libssh2-develUpgrade netcf-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libssh2-debugsourceUpgrade libiscsi-utilsUpgrade libvirt-adminUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade virt-dib-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade nbdkit-example-plugins-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub