An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-debuginfoUpgrade libssh2Upgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade nbdkit-example-pluginsUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-python-commonUpgrade libvirt-lock-sanlockUpgrade netcfUpgrade libguestfs-bash-completionUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-gzipUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-rbdUpgrade libguestfs-rsyncUpgrade virt-dib-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade supermin-debuginfoUpgrade nbdkit-debuginfoUpgrade qemu-kvmUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade sgabios-binUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcf-libsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libiscsi-utilsUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-gobject-develUpgrade python3-hivexUpgrade libguestfsUpgrade libguestfs-tools-cUpgrade nbdkitUpgrade qemu-kvm-block-curlUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade lua-guestfs-debuginfoUpgrade python3-libvirt-debuginfoUpgrade netcf-debugsourceUpgrade libssh2-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-java-develUpgrade libiscsiUpgrade libvirt-adminUpgrade libvirt-develUpgrade python3-libguestfsUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-python3Upgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade hivex-debugsourceUpgrade libvirt-libs-debuginfoUpgrade nbdkit-develUpgrade libvirt-admin-debuginfoUpgrade netcf-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade lua-guestfsUpgrade libvirt-libsUpgrade libguestfs-xfsUpgrade seabios-binUpgrade libvirt-debuginfoUpgrade virt-p2v-makerUpgrade libguestfs-inspect-iconsUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade seavgabios-binUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-javaUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade libguestfs-gfs2Upgrade sgabiosUpgrade seabiosUpgrade qemu-imgUpgrade libssh2-docsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-lock-sanlock-debuginfoUpgrade supermin-debugsourceUpgrade supermin-develUpgrade nbdkit-basic-pluginsUpgrade libssh2Upgrade libguestfs-debugsourceUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-networkUpgrade hivex-debuginfoUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-javadocUpgrade superminUpgrade hivexUpgrade netcf-libs-debuginfoUpgrade hivex-develUpgrade libguestfs-tools-c-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-commonUpgrade virt-dibUpgrade libvirt-dbus-debugsourceUpgrade ruby-libguestfsUpgrade libvirt-clientUpgrade libvirt-nssUpgrade virt-v2vUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-hivexUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade ruby-hivexUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-vddkUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-coreUpgrade libvirtUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-debugsourceUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-interface | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-secretUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curlUpgrade seabiosUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade netcf-libsUpgrade libguestfs-inspect-iconsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade libiscsi-utilsUpgrade virt-p2v-makerUpgrade libiscsiUpgrade libssh2-develUpgrade hivexUpgrade hivex-develUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-python3Upgrade netcfUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-gobjectUpgrade ruby-libguestfsUpgrade qemu-kvm-coreUpgrade supermin-develUpgrade nbdkit-plugin-gzipUpgrade python3-libvirtUpgrade qemu-kvmUpgrade libguestfs-winsupportUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nwfilterUpgrade seabios-binUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nssUpgrade nbdkit-develUpgrade libvirt-daemon-kvmUpgrade virt-dibUpgrade libvirt-daemon-config-networkUpgrade libvirt-lock-sanlockUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade nbdkit-example-pluginsUpgrade libguestfsUpgrade libguestfs-gobject-develUpgrade libvirt-libsUpgrade libguestfs-javadocUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade perl-Sys-VirtUpgrade ruby-hivexUpgrade qemu-kvm-block-sshUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade nbdkitUpgrade qemu-kvm-commonUpgrade sgabios-binUpgrade seavgabios-binUpgrade perl-hivexUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-tools-cUpgrade libguestfs-gfs2Upgrade libguestfs-javaUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python-commonUpgrade libvirt-develUpgrade libssh2-docsUpgrade libguestfs-rescueUpgrade libguestfs-develUpgrade virt-v2vUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-xzUpgrade nbdkit-bash-completionUpgrade libvirt-daemonUpgrade python3-libguestfsUpgrade superminUpgrade qemu-kvm-block-iscsiUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirtUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libssh2Upgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade sgabiosUpgrade libvirt-docsUpgrade libvirt-admin | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libssh2Upgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-debuginfoUpgrade netcfUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade seabios-binUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-rbd-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-man-pages-ukUpgrade libvirt-libsUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade python3-hivexUpgrade nbdkit-plugin-python3-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-develUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-Virt-debugsourceUpgrade supermin-debugsourceUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-debugsourceUpgrade superminUpgrade perl-hivexUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-v2vUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-debuginfoUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-gzip-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libssh2-docsUpgrade sgabiosUpgrade ruby-hivex-debuginfoUpgrade libiscsi-develUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-secretUpgrade virt-v2v-debuginfoUpgrade supermin-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-develUpgrade libvirt-nssUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-networkUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-java-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-xfsUpgrade libguestfs-java-develUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-adminUpgrade libvirtUpgrade seabiosUpgrade perl-Sys-Virt-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade lua-guestfsUpgrade supermin-develUpgrade virt-p2v-makerUpgrade libvirt-docsUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivex-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemonUpgrade libvirt-nss-debuginfoUpgrade nbdkitUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-commonUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade netcf-develUpgrade python3-libvirt-debuginfoUpgrade ruby-hivexUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade hivex-develUpgrade lua-guestfs-debuginfoUpgrade python3-libvirtUpgrade libguestfs-rsyncUpgrade libguestfs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvmUpgrade libvirt-client-debuginfoUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade hivexUpgrade libvirt-clientUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobject-develUpgrade libssh2-debugsourceUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsiUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade SLOFUpgrade nbdkit-bash-completionUpgrade qemu-img-debuginfoUpgrade libguestfs-inspect-iconsUpgrade netcf-libsUpgrade qemu-kvm-block-curlUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-plugin-gzipUpgrade ruby-libguestfsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-develUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-sshUpgrade libssh2-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-dibUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libiscsi-utilsUpgrade netcf-debugsourceUpgrade libguestfs-gobjectUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade netcf-libs-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-bash-completionUpgrade libiscsi-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-core | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub