An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2-devel | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libguestfs-javadocUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-libguestfsUpgrade libiscsi-develUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libvirtUpgrade qemu-kvm-block-ssh-debuginfoUpgrade seabios-binUpgrade lua-guestfsUpgrade netcf-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-clientUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-gobjectUpgrade libssh2-docsUpgrade libguestfs-toolsUpgrade libvirt-lock-sanlock-debuginfoUpgrade seavgabios-binUpgrade qemu-imgUpgrade seabiosUpgrade libvirt-daemon-driver-storage-iscsiUpgrade sgabiosUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-debugsourceUpgrade libguestfs-gfs2Upgrade libvirt-nssUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade hivexUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade netcf-develUpgrade virt-dibUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-develUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade supermin-develUpgrade supermin-debugsourceUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-coreUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docsUpgrade libvirt-libs-debuginfoUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-glusterUpgrade superminUpgrade perl-Sys-GuestfsUpgrade libguestfs-java-debuginfoUpgrade libssh2Upgrade nbdkit-example-plugins-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade hivex-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-vddkUpgrade hivex-develUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-basic-pluginsUpgrade hivex-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirtUpgrade perl-hivexUpgrade supermin-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-client-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-man-pages-ukUpgrade python3-hivexUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curlUpgrade libiscsiUpgrade qemu-kvm-common-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemonUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-rescueUpgrade python3-libguestfsUpgrade python3-libvirt-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-develUpgrade libvirt-develUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-gzipUpgrade nbdkit-debuginfoUpgrade nbdkit-bash-completionUpgrade libguestfs-bash-completionUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-python3Upgrade virt-v2v-debuginfoUpgrade libguestfs-java-develUpgrade qemu-kvm-block-rbdUpgrade netcfUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-benchmarkingUpgrade nbdkit-example-pluginsUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade virt-dib-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libssh2-debuginfoUpgrade python3-hivex-debuginfoUpgrade libssh2-debugsourceUpgrade libguestfsUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade qemu-kvm-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libssh2-develUpgrade libvirt-lock-sanlockUpgrade libguestfs-rsyncUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-adminUpgrade lua-guestfs-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-gobject-develUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-man-pages-jaUpgrade libguestfs-tools-c | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c7-libssh2Upgrade libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libguestfs-gobject-develUpgrade libvirt-clientUpgrade libguestfs-gobjectUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-networkUpgrade nbdkit-example-pluginsUpgrade libguestfs-winsupportUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade lua-guestfsUpgrade netcf-libsUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-glusterUpgrade qemu-guest-agentUpgrade seabiosUpgrade libguestfsUpgrade python3-libvirtUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-diskUpgrade hivexUpgrade nbdkit-develUpgrade qemu-imgUpgrade libiscsiUpgrade hivex-develUpgrade libvirt-daemon-driver-nwfilterUpgrade supermin-develUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-kvmUpgrade nbdkit-plugin-gzipUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-coreUpgrade netcfUpgrade seabios-binUpgrade libvirt-bash-completionUpgrade virt-dibUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsi-develUpgrade virt-p2v-makerUpgrade libiscsi-utilsUpgrade nbdkit-basic-pluginsUpgrade libguestfs-inspect-iconsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storageUpgrade ruby-libguestfsUpgrade libguestfs-gfs2Upgrade libguestfs-man-pages-ukUpgrade libguestfs-javadocUpgrade libvirt-adminUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libssh2Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-xfsUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemonUpgrade python3-libguestfsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-toolsUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade netcf-develUpgrade sgabios-binUpgrade seavgabios-binUpgrade qemu-kvm-commonUpgrade perl-hivexUpgrade libguestfs-develUpgrade superminUpgrade qemu-kvm-block-iscsiUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirtUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-xzUpgrade virt-v2vUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-develUpgrade libssh2-docsUpgrade libguestfs-javaUpgrade perl-Sys-VirtUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-java-develUpgrade libguestfs-rescueUpgrade nbdkit-plugin-vddkUpgrade nbdkitUpgrade libvirt-docsUpgrade sgabiosUpgrade libvirt-libs | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade netcf-libsUpgrade SLOFUpgrade qemu-kvm-debugsourceUpgrade hivex-develUpgrade python3-libvirtUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbusUpgrade libguestfs-gobjectUpgrade libguestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade qemu-kvmUpgrade libiscsi-utils-debuginfoUpgrade libiscsi-utilsUpgrade libssh2-develUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade ruby-libguestfsUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-bash-completionUpgrade virt-dib-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-block-sshUpgrade virt-dibUpgrade nbdkit-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-lock-sanlockUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-bash-completionUpgrade python3-hivex-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-javaUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-tools-cUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-benchmarkingUpgrade libssh2-debuginfoUpgrade qemu-imgUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libiscsi-debugsourceUpgrade netcf-debugsourceUpgrade qemu-guest-agentUpgrade libssh2-debugsourceUpgrade libiscsiUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-winsupportUpgrade libvirt-libs-debuginfoUpgrade libguestfs-man-pages-jaUpgrade hivexUpgrade libvirt-clientUpgrade libguestfs-javadocUpgrade perl-Sys-GuestfsUpgrade sgabios-binUpgrade nbdkit-plugin-python3-debuginfoUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-xzUpgrade virt-p2v-makerUpgrade seavgabios-binUpgrade libguestfs-man-pages-ukUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-docsUpgrade netcfUpgrade nbdkit-plugin-python3Upgrade supermin-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade ruby-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade lua-guestfsUpgrade qemu-kvm-block-curl-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-core-debuginfoUpgrade netcf-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-rescueUpgrade libguestfs-develUpgrade libguestfs-bash-completionUpgrade hivex-debuginfoUpgrade libvirt-daemonUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-debuginfoUpgrade libvirt-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade perl-Sys-Virt-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-java-debuginfoUpgrade seabios-binUpgrade libvirtUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-commonUpgrade libssh2-docsUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-VirtUpgrade netcf-develUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-libsUpgrade seabiosUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade ruby-hivexUpgrade supermin-debugsourceUpgrade libguestfs-java-develUpgrade libguestfs-tools-c-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkitUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-admin-debuginfoUpgrade nbdkit-example-pluginsUpgrade superminUpgrade virt-v2vUpgrade libguestfs-toolsUpgrade sgabiosUpgrade libvirt-daemon-driver-network-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libssh2Upgrade python3-hivex | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1-x86Upgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub