An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-develUpgrade libssh2-debuginfoUpgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-gobjectUpgrade lua-guestfsUpgrade perl-Sys-GuestfsUpgrade hivexUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-debuginfoUpgrade perl-hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-imgUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-dibUpgrade qemu-kvm-core-debuginfoUpgrade libssh2Upgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade seavgabios-binUpgrade libiscsiUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-docsUpgrade libvirt-nss-debuginfoUpgrade libvirt-bash-completionUpgrade python3-libvirtUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-rbdUpgrade ruby-hivexUpgrade libguestfs-gobject-develUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-winsupportUpgrade qemu-kvm-debugsourceUpgrade libvirtUpgrade libvirt-nssUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-glusterUpgrade netcf-develUpgrade ruby-libguestfsUpgrade libguestfs-javaUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-coreUpgrade nbdkit-debugsourceUpgrade qemu-kvmUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-client-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-java-develUpgrade ruby-hivex-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-vddkUpgrade libvirt-libs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-admin-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-java-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-debuginfoUpgrade libvirt-libsUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-toolsUpgrade libssh2-docsUpgrade libguestfs-xfsUpgrade netcf-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libguestfsUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemonUpgrade virt-v2vUpgrade sgabios-binUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-dbus-debuginfoUpgrade supermin-develUpgrade seabios-binUpgrade virt-p2v-makerUpgrade netcfUpgrade libvirt-daemon-kvmUpgrade supermin-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-hivex-debuginfoUpgrade libguestfs-bash-completionUpgrade python3-hivexUpgrade superminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade sgabiosUpgrade nbdkit-bash-completionUpgrade nbdkitUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-gfs2Upgrade qemu-guest-agentUpgrade supermin-debugsourceUpgrade netcf-libsUpgrade nbdkit-debuginfoUpgrade qemu-kvm-commonUpgrade libguestfs-javadocUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-adminUpgrade libguestfs-tools-cUpgrade libvirt-lock-sanlock-debuginfoUpgrade libssh2-develUpgrade libiscsi-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-develUpgrade libguestfs-debugsourceUpgrade hivex-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-develUpgrade hivex-develUpgrade seabiosUpgrade python3-libvirt-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade linux-c7-libssh2Upgrade libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade python3-hivexUpgrade python3-libvirtUpgrade virt-v2vUpgrade libguestfs-gfs2Upgrade libguestfs-inspect-iconsUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-coreUpgrade libssh2-docsUpgrade libvirtUpgrade hivexUpgrade qemu-kvm-commonUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-glusterUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade superminUpgrade seabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade seabiosUpgrade lua-guestfsUpgrade libguestfs-gobject-develUpgrade libguestfs-toolsUpgrade libguestfs-javadocUpgrade virt-p2v-makerUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobjectUpgrade libiscsi-develUpgrade nbdkit-develUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-imgUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-libguestfsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-bash-completionUpgrade libvirt-docsUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-rbdUpgrade seavgabios-binUpgrade netcf-develUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-pluginsUpgrade qemu-kvmUpgrade ruby-hivexUpgrade libssh2Upgrade libiscsiUpgrade hivex-develUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade sgabiosUpgrade libguestfs-rsyncUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-libsUpgrade libvirt-lock-sanlockUpgrade libvirt-libsUpgrade libguestfs-tools-cUpgrade libiscsi-utilsUpgrade libvirt-develUpgrade virt-dibUpgrade libssh2-develUpgrade sgabios-binUpgrade libvirt-adminUpgrade libguestfs-man-pages-ukUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-scsiUpgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade libguestfsUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curlUpgrade libguestfs-bash-completionUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemonUpgrade libguestfs-winsupportUpgrade libvirt-daemon-config-networkUpgrade nbdkit-example-pluginsUpgrade netcfUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkitUpgrade qemu-guest-agentUpgrade libguestfs-java | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade nbdkit-plugin-gzipUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libssh2-develUpgrade libvirt-daemon-kvmUpgrade seabiosUpgrade libguestfs-man-pages-ukUpgrade libiscsi-utils-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-guest-agent-debuginfoUpgrade libguestfsUpgrade libvirt-nssUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcf-libsUpgrade qemu-kvmUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python3-debuginfoUpgrade virt-p2v-makerUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade netcfUpgrade qemu-kvm-coreUpgrade libguestfs-gobject-develUpgrade libssh2-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-example-pluginsUpgrade libvirt-client-debuginfoUpgrade qemu-guest-agentUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-imgUpgrade libvirt-daemon-driver-secretUpgrade libvirt-libs-debuginfoUpgrade libvirt-adminUpgrade python3-libvirtUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-gobjectUpgrade hivexUpgrade libguestfs-debuginfoUpgrade libvirt-clientUpgrade libssh2-debugsourceUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade virt-dib-debuginfoUpgrade lua-guestfs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade supermin-debuginfoUpgrade libvirt-lock-sanlockUpgrade supermin-develUpgrade libvirtUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-develUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-debugsourceUpgrade SLOFUpgrade libguestfs-bash-completionUpgrade perl-hivex-debuginfoUpgrade hivex-develUpgrade hivex-debugsourceUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade libguestfs-benchmarkingUpgrade python3-hivex-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-v2vUpgrade libguestfs-tools-cUpgrade nbdkit-debugsourceUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-gzip-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-develUpgrade libguestfs-xfsUpgrade perl-hivexUpgrade libvirt-daemon-driver-nodedevUpgrade virt-v2v-debuginfoUpgrade libvirt-docsUpgrade supermin-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade sgabiosUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-xzUpgrade nbdkit-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libiscsi-debugsourceUpgrade libvirt-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-hivexUpgrade netcf-libs-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-java-develUpgrade libvirt-dbusUpgrade python3-libguestfsUpgrade qemu-kvm-block-rbdUpgrade seavgabios-binUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-debuginfoUpgrade qemu-kvm-commonUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libssh2-docsUpgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade superminUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemonUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade nbdkit-bash-completionUpgrade libguestfs-rescueUpgrade libvirt-libsUpgrade libssh2Upgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gfs2Upgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade nbdkitUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storageUpgrade ruby-hivexUpgrade libguestfs-debugsource | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub