An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libguestfs-develUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-rsyncUpgrade libssh2-develUpgrade seabiosUpgrade python3-hivexUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-libsUpgrade libvirt-adminUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-debugsourceUpgrade qemu-kvm-block-curlUpgrade python3-libvirt-debuginfoUpgrade libssh2-debuginfoUpgrade libssh2-docsUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-example-pluginsUpgrade libguestfs-xfsUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-java-debuginfoUpgrade libguestfs-rescueUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-admin-debuginfoUpgrade qemu-img-debuginfoUpgrade python3-libguestfsUpgrade libvirt-develUpgrade nbdkitUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-debugsourceUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade hivex-develUpgrade netcfUpgrade libvirt-daemon-kvmUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbusUpgrade supermin-develUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade seabios-binUpgrade libvirt-clientUpgrade supermin-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade sgabiosUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-VirtUpgrade supermin-debugsourceUpgrade netcf-libsUpgrade nbdkit-bash-completionUpgrade qemu-kvm-commonUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gfs2Upgrade libguestfs-toolsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-dib-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade superminUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade virt-v2vUpgrade sgabios-binUpgrade libiscsi-utils-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-develUpgrade virt-v2v-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade hivex-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-bash-completionUpgrade libiscsiUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-man-pages-jaUpgrade qemu-guest-agent-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libguestfs-benchmarkingUpgrade netcf-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-java-develUpgrade libvirt-libs-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-debugsourceUpgrade libguestfs-gobject-develUpgrade netcf-develUpgrade ruby-libguestfsUpgrade libssh2Upgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-hivexUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-lock-sanlockUpgrade seavgabios-binUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-benchmarking-debuginfoUpgrade hivexUpgrade perl-hivexUpgrade libguestfsUpgrade nbdkit-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade nbdkit-plugin-xz-debuginfoUpgrade python3-libvirtUpgrade libvirt-docsUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade qemu-imgUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-glusterUpgrade nbdkit-develUpgrade libvirtUpgrade perl-hivex-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-winsupportUpgrade libvirt-nssUpgrade nbdkit-basic-pluginsUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-client-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-example-plugins-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-logical | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade lua-guestfsUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobjectUpgrade qemu-kvm-commonUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-inspect-iconsUpgrade libvirtUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade python3-hivexUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-iscsiUpgrade python3-libguestfsUpgrade qemu-imgUpgrade supermin-develUpgrade nbdkit-develUpgrade qemu-kvm-coreUpgrade superminUpgrade perl-hivexUpgrade libvirt-daemon-kvmUpgrade ruby-libguestfsUpgrade libssh2-docsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade hivexUpgrade seabiosUpgrade seabios-binUpgrade libvirt-nssUpgrade libvirt-clientUpgrade virt-p2v-makerUpgrade libguestfs-rescueUpgrade libguestfs-xfsUpgrade python3-libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade nbdkit-basic-pluginsUpgrade qemu-kvmUpgrade ruby-hivexUpgrade libguestfs-gobject-develUpgrade netcf-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javadocUpgrade nbdkit-plugin-xzUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-rbdUpgrade seavgabios-binUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-jaUpgrade libguestfs-javaUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-gzipUpgrade libguestfs-develUpgrade libvirt-daemonUpgrade netcfUpgrade libguestfs-bash-completionUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-develUpgrade libvirt-develUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade libvirt-libsUpgrade hivex-develUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-bash-completionUpgrade libguestfsUpgrade sgabios-binUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade virt-dibUpgrade sgabiosUpgrade nbdkitUpgrade nbdkit-plugin-python3Upgrade libguestfs-tools-cUpgrade qemu-kvm-block-curlUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-config-networkUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-adminUpgrade libiscsiUpgrade libssh2 | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfsUpgrade ruby-libguestfsUpgrade libvirt-client-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-kvmUpgrade libvirt-nss-debuginfoUpgrade qemu-kvmUpgrade SLOFUpgrade libiscsiUpgrade libiscsi-utils-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade libiscsi-utilsUpgrade libguestfs-gobjectUpgrade libvirt-develUpgrade libssh2-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-adminUpgrade nbdkit-example-pluginsUpgrade libguestfs-gobject-debuginfoUpgrade seabios-binUpgrade python3-libvirt-debuginfoUpgrade libguestfs-benchmarkingUpgrade supermin-develUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-python3Upgrade nbdkit-develUpgrade supermin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcfUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade libssh2-debugsourceUpgrade nbdkit-plugin-gzipUpgrade libvirt-lock-sanlockUpgrade libguestfs-bash-completionUpgrade libvirt-debugsourceUpgrade hivex-develUpgrade qemu-img-debuginfoUpgrade qemu-guest-agentUpgrade lua-guestfsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-imgUpgrade libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-guest-agent-debuginfoUpgrade libssh2-develUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-gobject-develUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-winsupportUpgrade libiscsi-develUpgrade libvirt-daemon-driver-networkUpgrade hivexUpgrade virt-dib-debuginfoUpgrade python3-libvirtUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-p2v-makerUpgrade python3-hivex-debuginfoUpgrade hivex-debugsourceUpgrade seabiosUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade ruby-hivexUpgrade libguestfs-toolsUpgrade qemu-kvm-block-iscsiUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gfs2Upgrade libvirt-docsUpgrade netcf-libs-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-libsUpgrade libguestfs-java-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade netcf-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade supermin-debugsourceUpgrade qemu-kvm-commonUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libssh2Upgrade superminUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-sshUpgrade nbdkitUpgrade python3-hivexUpgrade libvirt-admin-debuginfoUpgrade perl-hivexUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-dbusUpgrade sgabiosUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-rsyncUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-debugsourceUpgrade hivex-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade sgabios-binUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rescueUpgrade nbdkit-bash-completionUpgrade libguestfs-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-docsUpgrade libvirt-debuginfoUpgrade libvirt-daemonUpgrade perl-Sys-VirtUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-debuginfoUpgrade seavgabios-binUpgrade virt-dibUpgrade virt-v2vUpgrade libguestfs-xfsUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-core | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1-32bitUpgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub