An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 22, 2019 | Mar 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2 | Apr 27, 2020 | Mar 21, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-man-pages-jaUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlockUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-debugsourceUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rescueUpgrade libvirt-bash-completionUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-debugsourceUpgrade libguestfs-rsyncUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkit-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade libiscsi-utilsUpgrade qemu-guest-agentUpgrade nbdkit-plugin-python-commonUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirtUpgrade netcf-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-rbdUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-img-debuginfoUpgrade libvirt-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-lock-sanlock-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-libsUpgrade hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-client-debuginfoUpgrade virt-dib-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade ruby-libguestfsUpgrade netcf-develUpgrade libguestfs-gobjectUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-java-develUpgrade perl-Sys-GuestfsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-imgUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-tools-cUpgrade lua-guestfs-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-coreUpgrade python3-libguestfsUpgrade supermin-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-example-pluginsUpgrade libguestfs-javadocUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-libguestfs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-debugsourceUpgrade qemu-kvm-commonUpgrade superminUpgrade libvirt-develUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-plugin-python3Upgrade lua-guestfsUpgrade libvirt-nss-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-bash-completionUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade ruby-hivexUpgrade libvirt-daemonUpgrade python3-hivex-debuginfoUpgrade libguestfs-benchmarkingUpgrade libguestfs-xfsUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-java-debuginfoUpgrade seabiosUpgrade python3-hivexUpgrade qemu-kvm-common-debuginfoUpgrade libssh2-docsUpgrade supermin-develUpgrade libvirt-libs-debuginfoUpgrade libvirt-nssUpgrade perl-Sys-VirtUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade python3-libvirtUpgrade perl-hivexUpgrade seabios-binUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-curl-debuginfoUpgrade hivex-debugsourceUpgrade nbdkit-plugin-xzUpgrade libiscsi-develUpgrade ruby-hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade supermin-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-qemuUpgrade netcf-libsUpgrade virt-v2vUpgrade sgabios-binUpgrade libguestfs-javaUpgrade virt-p2v-makerUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade netcfUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-vddkUpgrade qemu-kvmUpgrade python3-libvirt-debuginfoUpgrade libguestfs-man-pages-uk | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 21, 2019 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 21, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade nbdkit-example-pluginsUpgrade perl-Sys-VirtUpgrade libguestfsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-config-networkUpgrade libiscsiUpgrade qemu-kvm-block-iscsiUpgrade ruby-hivexUpgrade libvirt-docsUpgrade sgabios-binUpgrade nbdkit-plugin-python3Upgrade libguestfs-man-pages-jaUpgrade libguestfs-tools-cUpgrade libvirt-lock-sanlockUpgrade libguestfs-javadocUpgrade virt-dibUpgrade seabios-binUpgrade libguestfs-gobjectUpgrade libguestfs-rsyncUpgrade libiscsi-develUpgrade libguestfs-benchmarkingUpgrade supermin-develUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvmUpgrade hivex-develUpgrade libvirt-adminUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-gobject-develUpgrade netcfUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-vddkUpgrade libssh2Upgrade qemu-imgUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkitUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-gzipUpgrade nbdkit-bash-completionUpgrade libguestfs-develUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade libguestfs-man-pages-ukUpgrade libguestfs-java-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-develUpgrade netcf-libsUpgrade python3-libvirtUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade superminUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade libguestfs-rescueUpgrade libguestfs-xfsUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-rbdUpgrade libiscsi-utilsUpgrade libguestfs-inspect-iconsUpgrade seavgabios-binUpgrade seabiosUpgrade nbdkit-basic-pluginsUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade hivexUpgrade python3-libguestfsUpgrade nbdkit-plugin-python-commonUpgrade sgabiosUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-gfs2Upgrade libssh2-develUpgrade virt-v2vUpgrade nbdkit-plugin-xzUpgrade ruby-libguestfsUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2-docsUpgrade qemu-kvm-block-curlUpgrade libvirt-daemonUpgrade python3-hivexUpgrade libvirt-nssUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade perl-Sys-GuestfsUpgrade perl-hivexUpgrade lua-guestfsUpgrade nbdkit-develUpgrade qemu-kvm-block-sshUpgrade libvirt-bash-completionUpgrade libguestfs-tools | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade hivexUpgrade seabios-binUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-config-nwfilterUpgrade python3-hivexUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-vddkUpgrade libguestfs-rescueUpgrade libiscsi-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade hivex-debugsourceUpgrade nbdkit-plugin-xzUpgrade libguestfs-java-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-imgUpgrade libvirt-dbus-debugsourceUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-tools-c-debuginfoUpgrade perl-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-debugsourceUpgrade netcf-libsUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade qemu-kvmUpgrade qemu-kvm-block-glusterUpgrade libguestfs-javadocUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libssh2-docsUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-admin-debuginfoUpgrade supermin-develUpgrade libguestfs-debugsourceUpgrade seabiosUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-network-debuginfoUpgrade netcf-libs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade python3-libvirtUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-commonUpgrade ruby-hivex-debuginfoUpgrade ruby-hivexUpgrade libiscsi-debugsourceUpgrade superminUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-xfsUpgrade netcf-develUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-basic-pluginsUpgrade nbdkit-develUpgrade libvirt-libs-debuginfoUpgrade libssh2Upgrade perl-Sys-GuestfsUpgrade libguestfs-java-develUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade sgabiosUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-adminUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-gobjectUpgrade libvirt-bash-completionUpgrade ruby-libguestfs-debuginfoUpgrade libiscsiUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-gobject-develUpgrade libguestfs-man-pages-jaUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfsUpgrade libguestfs-tools-cUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-rsyncUpgrade libvirt-develUpgrade libguestfs-bash-completionUpgrade netcfUpgrade libvirt-dbusUpgrade supermin-debugsourceUpgrade qemu-guest-agentUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-curlUpgrade libvirt-libsUpgrade qemu-kvm-debuginfoUpgrade supermin-debuginfoUpgrade sgabios-binUpgrade virt-dibUpgrade nbdkitUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade libvirt-lock-sanlockUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-man-pages-ukUpgrade netcf-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-bash-completionUpgrade libguestfs-winsupportUpgrade perl-Sys-VirtUpgrade libvirt-daemonUpgrade libiscsi-utilsUpgrade nbdkit-example-pluginsUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfs-debuginfoUpgrade SLOFUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-gobject-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-disk-debuginfo | Mar 29, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-develUpgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub