An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-docsUpgrade libssh2-develUpgrade libssh2-debuginfo | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-common-debuginfoUpgrade nbdkitUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rsyncUpgrade libvirt-dbus-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-guest-agentUpgrade sgabios-binUpgrade libguestfs-gobject-develUpgrade python3-hivexUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemonUpgrade virt-dib-debuginfoUpgrade qemu-kvmUpgrade libguestfs-benchmarkingUpgrade libiscsi-debuginfoUpgrade libiscsi-utilsUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-rescueUpgrade libguestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-benchmarking-debuginfoUpgrade netcfUpgrade qemu-kvm-block-rbdUpgrade netcf-libsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libssh2-debugsourceUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-lock-sanlockUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-dbusUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-sshUpgrade supermin-debuginfoUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-gzipUpgrade python3-libvirt-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-bash-completionUpgrade libguestfs-winsupportUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade perl-Sys-VirtUpgrade libssh2-debuginfoUpgrade python3-libguestfsUpgrade libvirt-client-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-basic-plugins-debuginfoUpgrade libssh2-develUpgrade libiscsiUpgrade libvirt-adminUpgrade libguestfs-develUpgrade libvirt-bash-completionUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-python3Upgrade netcf-develUpgrade seavgabios-binUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-nssUpgrade libguestfs-javadocUpgrade libguestfs-inspect-iconsUpgrade python3-libvirtUpgrade libvirtUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-coreUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libssh2Upgrade libguestfs-java-debuginfoUpgrade hivexUpgrade nbdkit-example-plugins-debuginfoUpgrade netcf-libs-debuginfoUpgrade superminUpgrade libvirt-admin-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade supermin-debugsourceUpgrade ruby-libguestfsUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gfs2Upgrade perl-Sys-GuestfsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-debuginfoUpgrade lua-guestfsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-vddkUpgrade libvirt-lock-sanlock-debuginfoUpgrade seabiosUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-imgUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobjectUpgrade libssh2-docsUpgrade libguestfs-toolsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade perl-hivexUpgrade libvirt-clientUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade ruby-hivexUpgrade qemu-kvm-block-glusterUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade supermin-develUpgrade nbdkit-plugin-xzUpgrade nbdkit-develUpgrade libvirt-dbus-debugsourceUpgrade libvirt-libsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-docsUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-debugsourceUpgrade hivex-develUpgrade libiscsi-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade virt-dibUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-debugsourceUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-nwfilterUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-xz-debuginfoUpgrade seabios-bin | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade perl-Sys-GuestfsUpgrade libguestfs-gfs2Upgrade libguestfs-develUpgrade libguestfs-javaUpgrade libvirt-develUpgrade nbdkit-plugin-python-commonUpgrade libvirt-docsUpgrade libvirt-libsUpgrade libvirt-adminUpgrade libguestfs-rescueUpgrade libguestfs-javadocUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade libvirtUpgrade qemu-kvm-commonUpgrade seavgabios-binUpgrade perl-hivexUpgrade libssh2-docsUpgrade nbdkit-plugin-vddkUpgrade netcf-develUpgrade sgabiosUpgrade libguestfs-java-develUpgrade virt-v2vUpgrade sgabios-binUpgrade nbdkit-plugin-xzUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-bash-completionUpgrade libguestfs-bash-completionUpgrade ruby-hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade superminUpgrade qemu-kvm-block-iscsiUpgrade python3-hivexUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-xfsUpgrade libssh2Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-VirtUpgrade libguestfs-toolsUpgrade python3-libguestfsUpgrade qemu-kvm-block-rbdUpgrade nbdkitUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-coreUpgrade ruby-libguestfsUpgrade hivex-develUpgrade python3-libvirtUpgrade libvirt-daemon-driver-secretUpgrade libvirt-bash-completionUpgrade seabiosUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade netcf-libsUpgrade virt-dibUpgrade seabios-binUpgrade qemu-kvmUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-develUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsiUpgrade supermin-develUpgrade netcfUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libguestfs-gobject-develUpgrade nbdkit-develUpgrade libvirt-nssUpgrade libguestfs-winsupportUpgrade virt-p2v-makerUpgrade nbdkit-basic-pluginsUpgrade libvirt-dbusUpgrade libiscsi-utilsUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-qemuUpgrade nbdkit-example-pluginsUpgrade hivexUpgrade libssh2-develUpgrade libguestfs-gobject | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade nbdkitUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-rescueUpgrade libiscsi-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-interfaceUpgrade python3-hivexUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade seabios-binUpgrade libvirt-nss-debuginfoUpgrade lua-guestfsUpgrade seavgabios-binUpgrade nbdkit-plugin-xzUpgrade libguestfs-tools-c-debuginfoUpgrade libssh2Upgrade nbdkit-plugin-gzip-debuginfoUpgrade virt-p2v-makerUpgrade libguestfs-toolsUpgrade virt-v2v-debuginfoUpgrade libssh2-docsUpgrade libguestfs-java-develUpgrade libvirt-adminUpgrade qemu-kvm-core-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade sgabiosUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirtUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-develUpgrade virt-v2vUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-kvmUpgrade python3-libguestfsUpgrade libvirt-admin-debuginfoUpgrade libvirt-docsUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivex-debugsourceUpgrade sgabios-binUpgrade nbdkit-debuginfoUpgrade libguestfs-javadocUpgrade nbdkit-plugin-python3Upgrade libvirt-libsUpgrade libvirt-daemon-config-nwfilterUpgrade netcfUpgrade supermin-develUpgrade libvirt-nssUpgrade qemu-kvm-common-debuginfoUpgrade netcf-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade perl-hivexUpgrade perl-Sys-GuestfsUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-vddkUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-hivex-debuginfoUpgrade seabiosUpgrade supermin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcf-develUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-qemuUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade supermin-debugsourceUpgrade ruby-hivexUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-config-networkUpgrade superminUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-debugsourceUpgrade python3-hivex-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobjectUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-sshUpgrade libvirt-libs-debuginfoUpgrade libguestfs-winsupportUpgrade libssh2-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-basic-plugins-debuginfoUpgrade virt-dib-debuginfoUpgrade hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-clientUpgrade libvirt-dbusUpgrade perl-hivex-debuginfoUpgrade netcf-libsUpgrade nbdkit-basic-pluginsUpgrade libiscsi-utilsUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-debugsourceUpgrade libvirt-dbus-debugsourceUpgrade hivex-develUpgrade libguestfs-gobject-debuginfoUpgrade libiscsiUpgrade libguestfs-tools-cUpgrade lua-guestfs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libssh2-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-diskUpgrade SLOFUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-guest-agentUpgrade libguestfs-rsyncUpgrade nbdkit-develUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-debugsourceUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-rbdUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-imgUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-curlUpgrade virt-dibUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvmUpgrade libguestfs-benchmarkingUpgrade libvirt-client-debuginfoUpgrade netcf-debugsourceUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkit-plugin-python-common | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-32bitUpgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub