An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-debuginfoUpgrade libssh2Upgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-debugsourceUpgrade libssh2-develUpgrade libguestfs-rsyncUpgrade nbdkitUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libiscsi-debuginfoUpgrade qemu-kvmUpgrade ruby-libguestfs-debuginfoUpgrade netcfUpgrade libguestfs-rescueUpgrade nbdkit-example-pluginsUpgrade python3-hivexUpgrade libvirt-daemonUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-sshUpgrade virt-dib-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-man-pages-ukUpgrade qemu-guest-agentUpgrade netcf-debugsourceUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade netcf-libsUpgrade qemu-kvm-block-rbdUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-gobject-develUpgrade libiscsi-utilsUpgrade libvirt-dbusUpgrade qemu-kvm-debuginfoUpgrade libguestfsUpgrade libguestfs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-tools-cUpgrade perl-Sys-Virt-debugsourceUpgrade lua-guestfs-debuginfoUpgrade libguestfs-winsupportUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobject-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-bash-completionUpgrade sgabios-binUpgrade libguestfs-bash-completionUpgrade qemu-img-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agent-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade libguestfs-java-develUpgrade libvirt-daemon-debuginfoUpgrade python3-libguestfsUpgrade libiscsiUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-python3Upgrade perl-Sys-VirtUpgrade libvirt-develUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-java-debuginfoUpgrade libvirt-libs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libiscsi-debugsourceUpgrade hivex-develUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-config-networkUpgrade hivex-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-networkUpgrade python3-libguestfs-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-commonUpgrade ruby-libguestfsUpgrade libvirt-nssUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-network-debuginfoUpgrade virt-p2v-makerUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-imgUpgrade libvirt-docsUpgrade libguestfs-xfsUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade seabiosUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gobjectUpgrade nbdkit-plugin-vddkUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade libvirt-nss-debuginfoUpgrade libiscsi-develUpgrade libguestfs-inspect-iconsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade seavgabios-binUpgrade qemu-kvm-block-ssh-debuginfoUpgrade netcf-debuginfoUpgrade seabios-binUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nodedevUpgrade ruby-hivex-debuginfoUpgrade hivexUpgrade virt-dibUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-debugsourceUpgrade libvirt-libsUpgrade sgabiosUpgrade libguestfs-toolsUpgrade libssh2-docsUpgrade libssh2Upgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirtUpgrade libvirt-admin-debuginfoUpgrade netcf-libs-debuginfoUpgrade superminUpgrade nbdkit-plugin-xzUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-clientUpgrade virt-v2vUpgrade libvirt-daemon-driver-interfaceUpgrade supermin-develUpgrade ruby-hivexUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-block-gluster | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c7-libssh2Upgrade libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libguestfsUpgrade lua-guestfsUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-config-networkUpgrade seabiosUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade netcf-libsUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade libvirt-nssUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libvirtUpgrade supermin-develUpgrade libiscsi-develUpgrade libguestfs-inspect-iconsUpgrade libiscsi-utilsUpgrade libvirt-dbusUpgrade qemu-kvmUpgrade netcfUpgrade libvirt-bash-completionUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-glusterUpgrade virt-dibUpgrade libvirt-clientUpgrade libssh2-develUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade nbdkit-develUpgrade qemu-imgUpgrade seabios-binUpgrade libguestfs-gobjectUpgrade virt-p2v-makerUpgrade hivex-develUpgrade nbdkit-basic-pluginsUpgrade hivexUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libiscsiUpgrade libvirtUpgrade libguestfs-bash-completionUpgrade perl-hivexUpgrade seavgabios-binUpgrade qemu-kvm-commonUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-tools-cUpgrade libguestfs-gfs2Upgrade sgabios-binUpgrade libssh2Upgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade perl-Sys-VirtUpgrade ruby-hivexUpgrade qemu-kvm-block-sshUpgrade nbdkit-bash-completionUpgrade python3-libguestfsUpgrade libvirt-daemonUpgrade virt-v2vUpgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python-commonUpgrade libssh2-docsUpgrade libguestfs-rescueUpgrade libguestfs-javaUpgrade nbdkitUpgrade libguestfs-toolsUpgrade libguestfs-man-pages-jaUpgrade libvirt-develUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade qemu-kvm-block-rbdUpgrade perl-Sys-GuestfsUpgrade libvirt-docsUpgrade libguestfs-man-pages-ukUpgrade superminUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-adminUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade sgabiosUpgrade libvirt-libs | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirt-nssUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-admin-debuginfoUpgrade netcf-develUpgrade libguestfs-tools-c-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-debuginfoUpgrade libguestfs-toolsUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-nwfilterUpgrade supermin-debuginfoUpgrade seabiosUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade perl-hivexUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-java-develUpgrade superminUpgrade libguestfs-java-debuginfoUpgrade seabios-binUpgrade libvirt-adminUpgrade hivex-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-xzUpgrade python3-libguestfsUpgrade sgabiosUpgrade libvirt-daemon-config-nwfilterUpgrade python3-hivexUpgrade supermin-develUpgrade libguestfs-man-pages-ukUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-curl-debuginfoUpgrade libssh2Upgrade perl-Sys-Virt-debuginfoUpgrade ruby-hivexUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade qemu-kvm-commonUpgrade libguestfs-rescueUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-gzip-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade hivex-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-libsUpgrade seavgabios-binUpgrade libguestfs-develUpgrade virt-p2v-makerUpgrade libguestfs-bash-completionUpgrade perl-Sys-GuestfsUpgrade netcfUpgrade sgabios-binUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-debuginfoUpgrade virt-v2v-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-javadocUpgrade nbdkit-example-pluginsUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-VirtUpgrade virt-v2vUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-kvmUpgrade libiscsi-develUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-docsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-winsupportUpgrade SLOFUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade hivexUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agentUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-develUpgrade perl-hivex-debuginfoUpgrade libssh2-develUpgrade netcf-libs-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-kvm-coreUpgrade qemu-img-debuginfoUpgrade virt-dib-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-dibUpgrade libguestfs-man-pages-jaUpgrade libguestfs-debuginfoUpgrade libvirt-debugsourceUpgrade libguestfs-gobject-develUpgrade libssh2-debuginfoUpgrade libguestfs-benchmarkingUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libguestfs-rsyncUpgrade libvirt-client-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade netcf-debugsourceUpgrade libguestfs-tools-cUpgrade lua-guestfs-debuginfoUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-dbusUpgrade qemu-kvm-block-glusterUpgrade libguestfs-javaUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libssh2-debugsourceUpgrade libvirt-lock-sanlockUpgrade libvirt-clientUpgrade hivex-develUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfsUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libiscsi-debugsourceUpgrade python3-libvirt | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-develUpgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub