An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-develUpgrade libssh2-debuginfoUpgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-libguestfsUpgrade libguestfs-winsupportUpgrade netcf-develUpgrade libguestfs-gobject-develUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-debugsourceUpgrade libvirt-nssUpgrade qemu-kvm-block-rbdUpgrade perl-hivex-debuginfoUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-plugin-vddkUpgrade netcf-debuginfoUpgrade libiscsiUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libs-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libguestfs-debuginfoUpgrade nbdkit-develUpgrade qemu-imgUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-sshUpgrade virt-dibUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-man-pages-jaUpgrade nbdkit-debugsourceUpgrade python3-libvirtUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade lua-guestfs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-debuginfoUpgrade ruby-hivexUpgrade libguestfs-javaUpgrade libvirt-docsUpgrade qemu-kvmUpgrade libguestfs-gobjectUpgrade perl-Sys-GuestfsUpgrade hivexUpgrade libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade nbdkit-plugin-xz-debuginfoUpgrade libssh2Upgrade seavgabios-binUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-hivexUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-java-debuginfoUpgrade qemu-img-debuginfoUpgrade python3-hivexUpgrade libguestfs-bash-completionUpgrade seabiosUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-toolsUpgrade python3-libvirt-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade libssh2-docsUpgrade libvirt-develUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libvirt-admin-debuginfoUpgrade python3-libguestfsUpgrade netcf-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcfUpgrade virt-p2v-makerUpgrade supermin-debuginfoUpgrade python3-hivex-debuginfoUpgrade libiscsi-utilsUpgrade seabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-gfs2Upgrade sgabiosUpgrade supermin-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade perl-Sys-VirtUpgrade qemu-guest-agentUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-bash-completionUpgrade libguestfs-javadocUpgrade netcf-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-develUpgrade libvirt-adminUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-debugsourceUpgrade libiscsi-debuginfoUpgrade libguestfs-tools-cUpgrade hivex-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemonUpgrade superminUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-kvmUpgrade supermin-develUpgrade libvirt-clientUpgrade ruby-libguestfs-debuginfoUpgrade libssh2-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-python3Upgrade hivex-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade sgabios-binUpgrade virt-v2v | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade virt-v2vUpgrade libguestfs-gfs2Upgrade libguestfs-inspect-iconsUpgrade libssh2-docsUpgrade libvirtUpgrade qemu-kvm-commonUpgrade libguestfs-toolsUpgrade hivexUpgrade supermin-develUpgrade ruby-hivexUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvmUpgrade superminUpgrade libvirt-docsUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-xfsUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-benchmarkingUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-glusterUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-qemuUpgrade seavgabios-binUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-iscsiUpgrade python3-hivexUpgrade libvirt-daemon-kvmUpgrade python3-libvirtUpgrade libvirt-daemon-driver-networkUpgrade netcf-develUpgrade libguestfs-javadocUpgrade libguestfs-gobjectUpgrade libvirt-clientUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade seabiosUpgrade libiscsi-develUpgrade virt-p2v-makerUpgrade nbdkit-develUpgrade seabios-binUpgrade python3-libguestfsUpgrade perl-hivexUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-imgUpgrade libguestfs-javaUpgrade nbdkit-plugin-python-commonUpgrade libssh2Upgrade libvirt-libsUpgrade perl-Sys-VirtUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade qemu-guest-agentUpgrade qemu-kvm-block-iscsiUpgrade libssh2-develUpgrade libiscsiUpgrade hivex-develUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade sgabios-binUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade virt-dibUpgrade sgabiosUpgrade nbdkit-plugin-python3Upgrade nbdkitUpgrade libguestfs-rsyncUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-gzipUpgrade libguestfs-man-pages-ukUpgrade netcf-libsUpgrade libvirt-lock-sanlockUpgrade libguestfs-tools-cUpgrade nbdkit-plugin-vddkUpgrade libvirt-adminUpgrade libguestfsUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-winsupportUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-develUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsi-utilsUpgrade netcf | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade virt-p2v-makerUpgrade libvirt-daemon-config-networkUpgrade qemu-guest-agent-debuginfoUpgrade perl-hivex-debuginfoUpgrade seabiosUpgrade nbdkit-plugin-python3Upgrade libvirt-nssUpgrade libguestfsUpgrade ruby-libguestfsUpgrade libvirt-daemon-debuginfoUpgrade virt-dib-debuginfoUpgrade qemu-kvmUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade libvirt-client-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-clientUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-curlUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-develUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-winsupportUpgrade python3-libguestfs-debuginfoUpgrade libiscsi-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade seabios-binUpgrade qemu-imgUpgrade hivex-develUpgrade libvirt-bash-completionUpgrade libvirt-libs-debuginfoUpgrade nbdkit-plugin-gzipUpgrade python3-libvirt-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libiscsiUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade supermin-develUpgrade qemu-kvm-block-curl-debuginfoUpgrade SLOFUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-coreUpgrade hivex-debugsourceUpgrade qemu-img-debuginfoUpgrade libvirt-lock-sanlockUpgrade netcfUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade lua-guestfsUpgrade supermin-debuginfoUpgrade libguestfs-bash-completionUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-gobjectUpgrade hivexUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-adminUpgrade python3-libvirtUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade netcf-libsUpgrade libvirtUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade libssh2-debugsourceUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-iscsiUpgrade virt-dibUpgrade ruby-hivexUpgrade python3-libguestfsUpgrade nbdkit-bash-completionUpgrade perl-Sys-GuestfsUpgrade libvirt-daemonUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-gfs2Upgrade supermin-debugsourceUpgrade netcf-develUpgrade libvirt-docsUpgrade perl-hivexUpgrade libguestfs-xfsUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade superminUpgrade libguestfs-man-pages-jaUpgrade netcf-debugsourceUpgrade libguestfs-javaUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-plugin-vddkUpgrade virt-v2v-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade sgabiosUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-dbusUpgrade python3-hivexUpgrade libguestfs-java-debuginfoUpgrade seavgabios-binUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-rescueUpgrade nbdkitUpgrade netcf-libs-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-tools-cUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade perl-Sys-Virt-debuginfoUpgrade netcf-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libiscsi-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libssh2-docsUpgrade libguestfs-java-develUpgrade sgabios-binUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-toolsUpgrade nbdkit-example-plugins-debuginfo | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-1-x86Upgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub