An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-docsUpgrade libssh2-develUpgrade libssh2Upgrade libssh2-debuginfo | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-adminUpgrade libguestfs-rsyncUpgrade hivex-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-tools-cUpgrade libvirt-lock-sanlock-debuginfoUpgrade libssh2-develUpgrade python3-libvirt-debuginfoUpgrade virt-p2v-makerUpgrade supermin-develUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirt-dbusUpgrade libguestfs-tools-c-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-libsUpgrade supermin-debugsourceUpgrade netcfUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-utilsUpgrade virt-dib-debuginfoUpgrade qemu-guest-agentUpgrade perl-Sys-VirtUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-debugsourceUpgrade libguestfs-develUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade seabios-binUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcf-libsUpgrade seabiosUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade sgabiosUpgrade supermin-debuginfoUpgrade nbdkitUpgrade sgabios-binUpgrade qemu-kvm-commonUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade python3-libguestfsUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-img-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-bash-completionUpgrade libguestfs-toolsUpgrade netcf-debugsourceUpgrade libguestfs-java-debuginfoUpgrade nbdkit-example-pluginsUpgrade libguestfs-rescueUpgrade libvirt-admin-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libguestfs-man-pages-ukUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-plugin-gzip-debuginfoUpgrade hivex-develUpgrade nbdkit-bash-completionUpgrade qemu-kvm-common-debuginfoUpgrade python3-hivexUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade virt-v2vUpgrade perl-hivex-debuginfoUpgrade ruby-libguestfsUpgrade libguestfs-gobject-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-inspect-iconsUpgrade netcf-libs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade lua-guestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libvirtUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvmUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-benchmarkingUpgrade libguestfs-debuginfoUpgrade ruby-hivex-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-nss-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-nssUpgrade ruby-hivexUpgrade qemu-kvm-block-rbdUpgrade libguestfs-javaUpgrade libvirtUpgrade netcf-develUpgrade libvirt-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-man-pages-jaUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libiscsiUpgrade netcf-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-coreUpgrade hivex-debugsourceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-develUpgrade nbdkit-plugin-gzipUpgrade virt-dibUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libssh2-debugsourceUpgrade libssh2Upgrade qemu-imgUpgrade libvirt-docsUpgrade qemu-kvm-block-sshUpgrade libiscsi-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libvirt-lock-sanlockUpgrade perl-hivexUpgrade seavgabios-binUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfsUpgrade hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-network-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade netcf-libsUpgrade libguestfs-tools-cUpgrade libvirt-libsUpgrade libvirt-lock-sanlockUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-dbusUpgrade nbdkit-bash-completionUpgrade netcfUpgrade nbdkit-example-pluginsUpgrade libvirt-daemonUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-sshUpgrade libguestfs-bash-completionUpgrade libguestfs-winsupportUpgrade libssh2-develUpgrade hivex-develUpgrade libiscsiUpgrade libssh2Upgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-javaUpgrade libguestfsUpgrade libguestfs-develUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade nbdkitUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-gzipUpgrade libguestfs-man-pages-ukUpgrade sgabios-binUpgrade virt-dibUpgrade qemu-guest-agentUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-adminUpgrade libiscsi-utilsUpgrade libvirt-daemon-config-nwfilterUpgrade sgabiosUpgrade nbdkit-plugin-vddkUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-iscsiUpgrade python3-libvirtUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-glusterUpgrade netcf-develUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-xfsUpgrade hivexUpgrade supermin-develUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-xzUpgrade perl-Sys-GuestfsUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libguestfs-gfs2Upgrade virt-v2vUpgrade python3-hivexUpgrade superminUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nwfilterUpgrade libssh2-docsUpgrade libguestfs-inspect-iconsUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libguestfs-toolsUpgrade libguestfs-gobjectUpgrade qemu-kvm-commonUpgrade python3-libguestfsUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvmUpgrade libvirt-clientUpgrade ruby-libguestfsUpgrade qemu-imgUpgrade perl-hivexUpgrade seabiosUpgrade virt-p2v-makerUpgrade seabios-binUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade libiscsi-develUpgrade libguestfs-javadocUpgrade libguestfs-gobject-develUpgrade libguestfs-rescue | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirtUpgrade libssh2-develUpgrade libguestfs-benchmarkingUpgrade libiscsi-develUpgrade nbdkit-plugin-python3Upgrade netcf-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-develUpgrade python3-libvirtUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade supermin-develUpgrade libvirt-adminUpgrade libvirt-lock-sanlockUpgrade lua-guestfsUpgrade seabios-binUpgrade supermin-debuginfoUpgrade ruby-hivex-debuginfoUpgrade netcfUpgrade qemu-guest-agentUpgrade libvirt-libs-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-develUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade virt-dib-debuginfoUpgrade perl-hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade seabiosUpgrade libvirt-client-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libssh2-debugsourceUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-gzipUpgrade ruby-libguestfsUpgrade libguestfs-winsupportUpgrade qemu-kvm-debugsourceUpgrade SLOFUpgrade qemu-kvmUpgrade python3-hivex-debuginfoUpgrade hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-libvirt-debuginfoUpgrade hivex-develUpgrade libguestfsUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-imgUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-coreUpgrade libssh2-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libiscsi-utils-debuginfoUpgrade libvirt-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-gobject-develUpgrade libiscsiUpgrade virt-p2v-makerUpgrade qemu-kvm-block-curlUpgrade libiscsi-utilsUpgrade libvirt-daemon-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobjectUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade virt-dibUpgrade qemu-kvm-commonUpgrade sgabiosUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-basic-pluginsUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-bash-completionUpgrade libguestfs-javaUpgrade nbdkitUpgrade libvirt-docsUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-scsiUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libssh2-docsUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-rbdUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-interfaceUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-java-develUpgrade perl-Sys-VirtUpgrade libguestfs-rescueUpgrade netcf-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-admin-debuginfoUpgrade python3-hivexUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-libsUpgrade libguestfs-gfs2Upgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-vddkUpgrade libguestfs-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-example-plugins-debuginfoUpgrade superminUpgrade libvirt-daemonUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-nodedevUpgrade perl-hivexUpgrade nbdkit-debugsourceUpgrade libguestfs-tools-cUpgrade netcf-develUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-gzip-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-debugsourceUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-iscsiUpgrade virt-v2v-debuginfoUpgrade virt-v2vUpgrade libguestfs-toolsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade sgabios-binUpgrade libssh2Upgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub