An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-docsUpgrade libssh2Upgrade libssh2-develUpgrade libssh2-debuginfo | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libguestfs-benchmarkingUpgrade perl-hivexUpgrade libguestfs-gobjectUpgrade ruby-hivex-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libs-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-rbdUpgrade ruby-libguestfsUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-javaUpgrade libguestfs-man-pages-jaUpgrade libguestfs-winsupportUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-nssUpgrade qemu-kvm-coreUpgrade python3-libvirtUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvmUpgrade nbdkit-debugsourceUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-vddk-debuginfoUpgrade lua-guestfsUpgrade libguestfsUpgrade libvirt-docsUpgrade libguestfs-gobject-debuginfoUpgrade netcf-libs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-block-sshUpgrade libiscsiUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libssh2Upgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-develUpgrade nbdkit-plugin-gzipUpgrade virt-dibUpgrade nbdkit-plugin-python-commonUpgrade qemu-imgUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirtUpgrade perl-hivex-debuginfoUpgrade ruby-hivexUpgrade qemu-kvm-debuginfoUpgrade libssh2-debugsourceUpgrade hivex-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsi-debugsourceUpgrade virt-v2v-debuginfoUpgrade hivexUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-clientUpgrade libiscsi-utilsUpgrade supermin-develUpgrade virt-p2v-makerUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-libsUpgrade netcfUpgrade libguestfs-xfsUpgrade seabios-binUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade supermin-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-develUpgrade libguestfs-rescueUpgrade libvirt-daemon-config-networkUpgrade python3-libguestfsUpgrade libvirt-dbusUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-xzUpgrade libssh2-develUpgrade qemu-kvm-block-curlUpgrade libguestfs-gfs2Upgrade netcf-libsUpgrade sgabiosUpgrade qemu-kvm-commonUpgrade supermin-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-guest-agentUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-javadocUpgrade nbdkitUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-man-pages-ukUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-img-debuginfoUpgrade virt-v2vUpgrade libvirt-daemonUpgrade superminUpgrade sgabios-binUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-bash-completionUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-iscsiUpgrade netcf-debugsourceUpgrade nbdkit-example-pluginsUpgrade libssh2-docsUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-dib-debuginfoUpgrade seabiosUpgrade python3-libvirt-debuginfoUpgrade libssh2-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-rsyncUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-debugsourceUpgrade nbdkit-debuginfoUpgrade libguestfs-develUpgrade hivex-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-admin-debuginfoUpgrade nbdkit-plugin-python3Upgrade hivex-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libiscsi-devel | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c7-libssh2Upgrade libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade virt-dibUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storageUpgrade nbdkitUpgrade nbdkit-plugin-python3Upgrade sgabiosUpgrade qemu-kvm-block-sshUpgrade sgabios-binUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivex-develUpgrade libguestfs-javaUpgrade netcf-libsUpgrade libssh2-develUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-curlUpgrade libiscsiUpgrade libvirt-adminUpgrade libguestfs-develUpgrade libssh2Upgrade libvirt-lock-sanlockUpgrade libvirt-libsUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-jaUpgrade libvirt-dbusUpgrade libguestfsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-develUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-bash-completionUpgrade libguestfs-winsupportUpgrade libvirt-daemonUpgrade netcfUpgrade perl-Sys-VirtUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-guest-agentUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-basic-pluginsUpgrade libvirt-docsUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-secretUpgrade libssh2-docsUpgrade seavgabios-binUpgrade qemu-imgUpgrade nbdkit-plugin-xzUpgrade superminUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-hivexUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-gobjectUpgrade perl-hivexUpgrade libvirt-clientUpgrade lua-guestfsUpgrade qemu-kvm-commonUpgrade libguestfs-toolsUpgrade libguestfs-benchmarkingUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade python3-libvirtUpgrade python3-hivexUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javadocUpgrade hivexUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobject-develUpgrade libguestfs-xfsUpgrade supermin-develUpgrade qemu-kvm-coreUpgrade ruby-libguestfsUpgrade python3-libguestfsUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-kvmUpgrade seabiosUpgrade seabios-binUpgrade libvirt-nssUpgrade virt-p2v-makerUpgrade libiscsi-develUpgrade libvirtUpgrade libguestfs-rescue | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade ruby-hivexUpgrade libguestfs-toolsUpgrade qemu-kvm-block-sshUpgrade nbdkit-example-plugins-debuginfoUpgrade sgabiosUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-develUpgrade qemu-kvm-block-rbdUpgrade ruby-libguestfs-debuginfoUpgrade sgabios-binUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemonUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libssh2-docsUpgrade libguestfs-debugsourceUpgrade supermin-debugsourceUpgrade nbdkit-bash-completionUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-gzip-debuginfoUpgrade python3-hivexUpgrade perl-hivexUpgrade libvirt-docsUpgrade qemu-kvm-commonUpgrade nbdkit-debugsourceUpgrade libguestfs-xfsUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-javaUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-debugsourceUpgrade virt-v2vUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-vddkUpgrade virt-dibUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-python-commonUpgrade libiscsi-debugsourceUpgrade libvirt-dbusUpgrade libguestfs-tools-cUpgrade netcf-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-libsUpgrade libssh2Upgrade hivex-debuginfoUpgrade seavgabios-binUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade superminUpgrade perl-Sys-Virt-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-nwfilterUpgrade netcfUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-logicalUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libssh2-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade netcf-libsUpgrade libiscsi-develUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-lock-sanlockUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-qemuUpgrade seabios-binUpgrade lua-guestfsUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libvirtUpgrade libguestfs-gobjectUpgrade libssh2-debugsourceUpgrade hivexUpgrade lua-guestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfsUpgrade libssh2-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-imgUpgrade libvirt-nssUpgrade nbdkit-develUpgrade libvirt-libs-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-python3Upgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-winsupportUpgrade libvirtUpgrade libiscsi-utils-debuginfoUpgrade hivex-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-glusterUpgrade perl-hivex-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade virt-p2v-makerUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-bash-completionUpgrade supermin-debuginfoUpgrade libiscsiUpgrade libvirt-nss-debuginfoUpgrade virt-dib-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-plugin-gzipUpgrade SLOFUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gobject-develUpgrade seabiosUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-devel | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub