An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2 | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-block-curlUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade qemu-kvmUpgrade libguestfs-java-develUpgrade libssh2-debuginfoUpgrade libguestfs-rsyncUpgrade libiscsiUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-block-sshUpgrade lua-guestfs-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-adminUpgrade netcf-debugsourceUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkitUpgrade netcfUpgrade nbdkit-plugin-gzipUpgrade libiscsi-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-rbdUpgrade libvirt-lock-sanlockUpgrade virt-v2v-debuginfoUpgrade libguestfs-bash-completionUpgrade supermin-debuginfoUpgrade libguestfs-rescueUpgrade sgabios-binUpgrade nbdkit-plugin-python3Upgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-develUpgrade qemu-kvm-block-curl-debuginfoUpgrade virt-dib-debuginfoUpgrade python3-hivexUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-man-pages-jaUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-tools-cUpgrade libssh2-develUpgrade libvirt-daemonUpgrade libguestfs-winsupportUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade python3-libguestfsUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade netcf-libsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-bash-completionUpgrade libguestfs-benchmarking-debuginfoUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libiscsi-utilsUpgrade qemu-img-debuginfoUpgrade qemu-guest-agentUpgrade libguestfsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-debugsourceUpgrade ruby-hivexUpgrade netcf-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-vddkUpgrade hivex-develUpgrade libguestfs-java-debuginfoUpgrade hivexUpgrade qemu-kvm-coreUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-Virt-debuginfoUpgrade libvirtUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libsUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-debugsourceUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-commonUpgrade supermin-debugsourceUpgrade nbdkit-basic-pluginsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade hivex-debuginfoUpgrade libvirt-docsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libiscsi-debugsourceUpgrade superminUpgrade libssh2Upgrade netcf-libs-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-debugsourceUpgrade supermin-develUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-v2vUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-qemuUpgrade qemu-imgUpgrade libguestfs-gobjectUpgrade libssh2-docsUpgrade libguestfs-toolsUpgrade seabiosUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storageUpgrade lua-guestfsUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javaUpgrade libiscsi-develUpgrade libvirt-debuginfoUpgrade libguestfs-inspect-iconsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade virt-p2v-makerUpgrade qemu-kvm-block-ssh-debuginfoUpgrade seabios-bin | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade libguestfs-winsupportUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-develUpgrade hivexUpgrade python3-libvirtUpgrade netcf-libsUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade libvirt-bash-completionUpgrade qemu-guest-agentUpgrade libguestfs-gobjectUpgrade libguestfsUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade ruby-libguestfsUpgrade libssh2-develUpgrade supermin-develUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-networkUpgrade libvirt-dbusUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-coreUpgrade libiscsi-utilsUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-inspect-iconsUpgrade netcfUpgrade virt-p2v-makerUpgrade libguestfs-gobject-develUpgrade libiscsi-develUpgrade nbdkit-plugin-gzipUpgrade libiscsiUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade virt-dibUpgrade seabiosUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storageUpgrade python3-hivexUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-sshUpgrade perl-hivexUpgrade nbdkitUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade nbdkit-bash-completionUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libssh2Upgrade libvirt-docsUpgrade libvirt-adminUpgrade libvirt-libsUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade libguestfs-javadocUpgrade virt-v2vUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-xzUpgrade libvirt-develUpgrade libssh2-docsUpgrade libguestfs-rescueUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-iscsiUpgrade superminUpgrade libvirtUpgrade libguestfs-tools-cUpgrade nbdkit-plugin-vddkUpgrade libguestfs-javaUpgrade sgabiosUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-commonUpgrade sgabios-binUpgrade seavgabios-binUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gfs2Upgrade ruby-hivexUpgrade libguestfs-java-develUpgrade libguestfs-toolsUpgrade libguestfs-man-pages-ja | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade python3-hivexUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemuUpgrade superminUpgrade netcf-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-network-debuginfoUpgrade ruby-hivex-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-admin-debuginfoUpgrade nbdkit-example-pluginsUpgrade seabiosUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkitUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-kvmUpgrade nbdkit-plugin-python3-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirtUpgrade libguestfs-java-debuginfoUpgrade libiscsi-debuginfoUpgrade libssh2Upgrade qemu-kvm-common-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade supermin-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-hivexUpgrade ruby-hivexUpgrade libguestfs-javadocUpgrade libvirt-develUpgrade libvirt-debuginfoUpgrade qemu-kvm-debuginfoUpgrade netcfUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-debugsourceUpgrade libvirt-daemonUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-bash-completionUpgrade supermin-debuginfoUpgrade perl-Sys-GuestfsUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade hivex-debuginfoUpgrade libiscsi-develUpgrade libvirt-nssUpgrade sgabiosUpgrade libvirt-libsUpgrade libguestfs-gfs2Upgrade sgabios-binUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libssh2-docsUpgrade virt-p2v-makerUpgrade libvirt-docsUpgrade lua-guestfsUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade seavgabios-binUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-adminUpgrade libguestfs-xfsUpgrade nbdkit-plugin-vddkUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade netcf-libs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-rsyncUpgrade virt-dib-debuginfoUpgrade hivexUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade hivex-develUpgrade nbdkit-basic-pluginsUpgrade netcf-libsUpgrade libguestfs-winsupportUpgrade libvirt-libs-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libssh2-develUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-debugsourceUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-curlUpgrade libguestfs-tools-cUpgrade libvirt-bash-completionUpgrade ruby-libguestfsUpgrade nbdkit-develUpgrade SLOFUpgrade qemu-kvm-block-sshUpgrade nbdkit-debugsourceUpgrade python3-libvirtUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade perl-hivex-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-kvmUpgrade virt-dibUpgrade libvirt-daemon-debuginfoUpgrade libiscsiUpgrade qemu-kvm-block-glusterUpgrade libvirt-clientUpgrade libguestfs-gobject-develUpgrade libssh2-debugsourceUpgrade python3-hivex-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-client-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-gzipUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-benchmarkingUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfs-debuginfoUpgrade libvirt-lock-sanlockUpgrade libssh2-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-java | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-32bitUpgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub