An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2Upgrade libssh2-debuginfo | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-imgUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rescueUpgrade libssh2-debugsourceUpgrade sgabiosUpgrade libguestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-coreUpgrade perl-Sys-GuestfsUpgrade nbdkit-debugsourceUpgrade qemu-img-debuginfoUpgrade netcf-debugsourceUpgrade nbdkit-plugin-gzipUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobject-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-bash-completionUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-sshUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-bash-completionUpgrade libssh2-develUpgrade libvirtUpgrade libguestfsUpgrade libvirt-dbus-debugsourceUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-develUpgrade libguestfs-gobjectUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade nbdkitUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade qemu-guest-agent-debuginfoUpgrade hivexUpgrade libvirt-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade virt-dib-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-debugsourceUpgrade qemu-kvm-debuginfoUpgrade libiscsi-utilsUpgrade netcf-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade netcf-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-winsupportUpgrade python3-libguestfsUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-nssUpgrade libvirt-docsUpgrade seabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade python3-libvirtUpgrade libssh2-docsUpgrade virt-p2v-makerUpgrade qemu-kvm-core-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-man-pages-ukUpgrade hivex-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-toolsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-benchmarkingUpgrade libvirt-daemonUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade libiscsi-develUpgrade virt-dibUpgrade supermin-debuginfoUpgrade ruby-hivexUpgrade qemu-kvm-common-debuginfoUpgrade libssh2Upgrade libvirt-clientUpgrade libguestfs-javadocUpgrade libvirt-dbusUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-gluster-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade seabiosUpgrade python3-libvirt-debuginfoUpgrade libvirt-adminUpgrade perl-Sys-Virt-debugsourceUpgrade python3-hivexUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storageUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-plugin-vddkUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvmUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade seavgabios-binUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade perl-hivexUpgrade perl-hivex-debuginfoUpgrade ruby-hivex-debuginfoUpgrade hivex-develUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade superminUpgrade sgabios-binUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcfUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-VirtUpgrade libvirt-libs-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-xzUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-libsUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-example-plugins | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade linux-c7-libssh2Upgrade libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-benchmarkingUpgrade seabios-binUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-dibUpgrade libssh2Upgrade libguestfs-rsyncUpgrade libiscsi-develUpgrade hivex-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-develUpgrade python3-libvirtUpgrade libguestfs-java-develUpgrade libguestfs-gobject-develUpgrade qemu-kvm-coreUpgrade netcf-libsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-config-nwfilterUpgrade supermin-develUpgrade virt-p2v-makerUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade ruby-hivexUpgrade libiscsiUpgrade nbdkit-plugin-python3Upgrade libvirt-docsUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-gzipUpgrade libvirt-lock-sanlockUpgrade nbdkitUpgrade netcfUpgrade libguestfs-develUpgrade qemu-imgUpgrade libguestfs-javaUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-config-networkUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-man-pages-ukUpgrade libvirt-libsUpgrade nbdkit-example-pluginsUpgrade perl-Sys-VirtUpgrade libguestfs-winsupportUpgrade libguestfsUpgrade libguestfs-javadocUpgrade superminUpgrade libguestfs-gfs2Upgrade sgabiosUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-develUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-sshUpgrade nbdkit-develUpgrade libguestfs-toolsUpgrade libvirt-bash-completionUpgrade libssh2-develUpgrade virt-v2vUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade ruby-libguestfsUpgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade libssh2-docsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfsUpgrade libguestfs-xfsUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade libvirtUpgrade libiscsi-utilsUpgrade seavgabios-binUpgrade seabiosUpgrade nbdkit-basic-pluginsUpgrade qemu-guest-agentUpgrade perl-Sys-GuestfsUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade hivex | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python-commonUpgrade SLOFUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-libsUpgrade libiscsiUpgrade qemu-kvm-coreUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-javaUpgrade libssh2-debugsourceUpgrade libvirt-lock-sanlockUpgrade libguestfs-winsupportUpgrade netcf-debugsourceUpgrade nbdkit-basic-plugins-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-bash-completionUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkitUpgrade qemu-kvm-block-sshUpgrade qemu-guest-agent-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfsUpgrade netcfUpgrade qemu-kvm-block-gluster-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-coreUpgrade netcf-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade supermin-debuginfoUpgrade libssh2-debuginfoUpgrade sgabios-binUpgrade virt-dibUpgrade libvirt-dbusUpgrade libguestfs-gobjectUpgrade qemu-kvm-debuginfoUpgrade libssh2-develUpgrade qemu-guest-agentUpgrade libguestfs-tools-cUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-develUpgrade qemu-img-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemonUpgrade python3-libvirt-debuginfoUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libvirt-debugsourceUpgrade libvirt-adminUpgrade libguestfs-man-pages-jaUpgrade virt-dib-debuginfoUpgrade libiscsi-utilsUpgrade libguestfs-gobject-develUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade qemu-kvm-common-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-java-develUpgrade libvirt-dbus-debugsourceUpgrade hivex-develUpgrade hivexUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-xzUpgrade netcf-develUpgrade qemu-imgUpgrade perl-hivex-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-toolsUpgrade hivex-debugsourceUpgrade libvirt-debuginfoUpgrade libiscsi-debuginfoUpgrade virt-v2vUpgrade qemu-kvm-core-debuginfoUpgrade virt-p2v-makerUpgrade hivex-debuginfoUpgrade nbdkit-plugin-vddkUpgrade superminUpgrade libvirt-libs-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libguestfs-xfsUpgrade qemu-kvmUpgrade libvirt-nss-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-nssUpgrade qemu-kvm-commonUpgrade seabios-binUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade supermin-develUpgrade libvirt-clientUpgrade netcf-libsUpgrade libvirt-admin-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade seabiosUpgrade libssh2Upgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-debugsourceUpgrade perl-hivexUpgrade libssh2-docsUpgrade python3-libvirtUpgrade libiscsi-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-inspect-iconsUpgrade ruby-libguestfsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-docsUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-glusterUpgrade python3-hivexUpgrade libvirt-daemon-kvmUpgrade ruby-hivexUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsiUpgrade seavgabios-binUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-gfs2Upgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-lock-sanlock-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bitUpgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub