An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2Upgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivex-debugsourceUpgrade lua-guestfsUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python-commonUpgrade libiscsiUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-bash-completionUpgrade perl-Sys-GuestfsUpgrade seavgabios-binUpgrade libguestfs-benchmarking-debuginfoUpgrade virt-v2v-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-gobjectUpgrade perl-hivexUpgrade libvirt-daemon-config-nwfilterUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-docsUpgrade libguestfs-java-develUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfs-man-pages-jaUpgrade python3-libvirtUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-vddkUpgrade netcf-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade hivexUpgrade qemu-kvmUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade ruby-hivexUpgrade qemu-kvm-debugsourceUpgrade ruby-libguestfsUpgrade libguestfs-javaUpgrade libguestfs-gobject-develUpgrade libvirtUpgrade libvirt-dbus-debugsourceUpgrade netcf-develUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfsUpgrade libvirt-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-basic-pluginsUpgrade netcf-libs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-inspect-iconsUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-develUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python3-debuginfoUpgrade libssh2Upgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-dibUpgrade qemu-imgUpgrade netcf-libsUpgrade virt-dib-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-clientUpgrade nbdkit-plugin-xzUpgrade libguestfs-javadocUpgrade nbdkit-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libssh2-develUpgrade libguestfs-debugsourceUpgrade netcf-debugsourceUpgrade python3-hivexUpgrade virt-v2vUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade seabiosUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-develUpgrade qemu-kvm-block-curlUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-gfs2Upgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-python3Upgrade libssh2-docsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade superminUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-rescueUpgrade libguestfs-java-debuginfoUpgrade sgabios-binUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libguestfsUpgrade hivex-develUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-scsiUpgrade supermin-develUpgrade libvirt-daemon-kvmUpgrade virt-p2v-makerUpgrade seabios-binUpgrade netcfUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbusUpgrade libiscsi-utilsUpgrade supermin-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-xfsUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade qemu-guest-agentUpgrade perl-Sys-VirtUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade sgabiosUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade libiscsi-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-adminUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-tools-cUpgrade hivex-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade virt-v2vUpgrade libguestfs-gfs2Upgrade libguestfs-inspect-iconsUpgrade libssh2-docsUpgrade libvirtUpgrade qemu-kvmUpgrade netcf-develUpgrade nbdkit-basic-pluginsUpgrade seabiosUpgrade libvirt-nssUpgrade libvirt-docsUpgrade ruby-hivexUpgrade libguestfs-gobject-develUpgrade libguestfs-javadocUpgrade qemu-imgUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-hivexUpgrade qemu-kvm-block-rbdUpgrade seabios-binUpgrade virt-p2v-makerUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-xzUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade python3-hivexUpgrade libvirt-daemon-kvmUpgrade python3-libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-bash-completionUpgrade perl-Sys-GuestfsUpgrade libiscsi-develUpgrade libvirt-clientUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-glusterUpgrade libguestfs-xfsUpgrade supermin-develUpgrade qemu-kvm-coreUpgrade superminUpgrade hivexUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobjectUpgrade lua-guestfsUpgrade qemu-kvm-commonUpgrade libguestfs-toolsUpgrade libguestfs-javaUpgrade libvirt-develUpgrade libssh2Upgrade libiscsi-utilsUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-config-networkUpgrade sgabios-binUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-vddkUpgrade nbdkit-example-pluginsUpgrade libssh2-develUpgrade libiscsiUpgrade hivex-develUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade netcf-libsUpgrade libvirt-lock-sanlockUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-python-commonUpgrade netcfUpgrade libguestfs-winsupportUpgrade libguestfs-java-develUpgrade virt-dibUpgrade libvirt-daemon-driver-storageUpgrade nbdkitUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-adminUpgrade sgabiosUpgrade libguestfsUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade qemu-guest-agentUpgrade nbdkit-plugin-gzip | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-coreUpgrade hivex-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-libsUpgrade virt-dibUpgrade libvirt-daemon-driver-nodedevUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rsyncUpgrade netcf-libs-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-java-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-debugsourceUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-VirtUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-man-pages-jaUpgrade superminUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade seavgabios-binUpgrade nbdkit-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-plugin-xzUpgrade sgabiosUpgrade libguestfs-gfs2Upgrade libguestfs-xfsUpgrade virt-v2v-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-javaUpgrade qemu-kvm-block-sshUpgrade libssh2Upgrade nbdkit-basic-pluginsUpgrade netcf-debugsourceUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-debugsourceUpgrade python3-libguestfsUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-plugins-debuginfoUpgrade netcf-develUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade sgabios-binUpgrade ruby-hivexUpgrade python3-hivexUpgrade nbdkitUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-toolsUpgrade nbdkit-plugin-vddkUpgrade libvirt-docsUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbusUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade supermin-debugsourceUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-winsupportUpgrade python3-hivex-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-debuginfoUpgrade libssh2-develUpgrade libguestfs-gobject-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade hivex-develUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-core-debuginfoUpgrade libvirtUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade supermin-develUpgrade hivex-debugsourceUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-qemuUpgrade netcfUpgrade libvirt-debugsourceUpgrade lua-guestfsUpgrade seabios-binUpgrade libvirt-lock-sanlockUpgrade qemu-img-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-develUpgrade libvirt-develUpgrade qemu-kvmUpgrade libguestfsUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-gobjectUpgrade virt-dib-debuginfoUpgrade libvirt-nss-debuginfoUpgrade SLOFUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-man-pages-ukUpgrade netcf-libsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libiscsi-utilsUpgrade libvirt-clientUpgrade ruby-hivex-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade python3-libvirt-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-curlUpgrade seabiosUpgrade libvirt-daemon-kvmUpgrade nbdkit-develUpgrade libguestfs-bash-completionUpgrade libvirt-client-debuginfoUpgrade libiscsiUpgrade libssh2-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade hivexUpgrade qemu-kvm-block-glusterUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libssh2-debugsourceUpgrade python3-libvirtUpgrade libvirt-daemon-config-networkUpgrade qemu-guest-agent-debuginfoUpgrade perl-hivex-debuginfo | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-develUpgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub