An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libguestfs-tools-c-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-debuginfoUpgrade seabiosUpgrade libguestfs-man-pages-ukUpgrade libvirt-clientUpgrade nbdkit-plugin-python3Upgrade ruby-libguestfs-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libssh2-develUpgrade nbdkit-example-pluginsUpgrade netcf-libsUpgrade qemu-guest-agentUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-hivexUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-toolsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-gfs2Upgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-tools-cUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-docsUpgrade libvirt-libsUpgrade sgabiosUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-develUpgrade virt-p2v-makerUpgrade supermin-develUpgrade perl-Sys-VirtUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-commonUpgrade python3-libguestfsUpgrade libguestfs-xfsUpgrade libssh2-debuginfoUpgrade virt-dib-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-rescueUpgrade libvirt-daemon-config-networkUpgrade supermin-debugsourceUpgrade libiscsi-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkitUpgrade hivex-develUpgrade qemu-img-debuginfoUpgrade libiscsi-utilsUpgrade netcfUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-dbusUpgrade sgabios-binUpgrade libguestfs-bash-completionUpgrade seabios-binUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-block-curlUpgrade libiscsi-utils-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade superminUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemonUpgrade virt-v2vUpgrade perl-hivexUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-imgUpgrade virt-dibUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2Upgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-javaUpgrade seavgabios-binUpgrade libvirt-lock-sanlockUpgrade hivexUpgrade perl-Sys-GuestfsUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libiscsiUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libvirt-debuginfoUpgrade libiscsi-debugsourceUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-man-pages-jaUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-guest-agent-debuginfoUpgrade python3-libvirtUpgrade libvirt-docsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-vddkUpgrade netcf-develUpgrade libvirt-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-java-develUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-debugsourceUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-winsupportUpgrade libvirtUpgrade nbdkit-example-plugins-debuginfoUpgrade ruby-hivexUpgrade hivex-debugsourceUpgrade ruby-libguestfsUpgrade netcf-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-block-rbdUpgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade perl-hivex-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-debugsourceUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade netcfUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade netcf-libsUpgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libguestfs-winsupportUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-sshUpgrade hivex-develUpgrade libguestfs-bash-completionUpgrade libvirt-libsUpgrade libiscsi-utilsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-develUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-glusterUpgrade libssh2Upgrade libiscsiUpgrade libssh2-develUpgrade libguestfs-man-pages-ukUpgrade libvirt-adminUpgrade nbdkit-plugin-vddkUpgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade nbdkit-plugin-gzipUpgrade libguestfs-rsyncUpgrade virt-dibUpgrade libvirt-dbusUpgrade libguestfs-java-develUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storageUpgrade nbdkitUpgrade nbdkit-plugin-python3Upgrade sgabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade qemu-kvmUpgrade netcf-develUpgrade libvirt-bash-completionUpgrade libguestfs-gfs2Upgrade virt-v2vUpgrade nbdkit-basic-pluginsUpgrade libguestfs-inspect-iconsUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-commonUpgrade lua-guestfsUpgrade libguestfs-benchmarkingUpgrade python3-libguestfsUpgrade qemu-imgUpgrade perl-hivexUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade ruby-libguestfsUpgrade ruby-hivexUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-xzUpgrade libguestfs-gobjectUpgrade libiscsi-develUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-interfaceUpgrade seabios-binUpgrade seabiosUpgrade libvirt-nssUpgrade libguestfs-rescueUpgrade libguestfs-javadocUpgrade libguestfs-gobject-develUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nwfilterUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-logicalUpgrade supermin-develUpgrade superminUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-xfsUpgrade hivexUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirtUpgrade libssh2-docsUpgrade python3-libvirtUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-core | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade supermin-debuginfoUpgrade libguestfsUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-python3Upgrade qemu-kvmUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-bash-completionUpgrade ruby-hivex-debuginfoUpgrade libguestfs-winsupportUpgrade qemu-guest-agentUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-benchmarkingUpgrade python3-hivex-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade lua-guestfsUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlockUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libssh2-develUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-adminUpgrade lua-guestfs-debuginfoUpgrade netcf-libsUpgrade libguestfs-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-develUpgrade libvirtUpgrade libssh2-debuginfoUpgrade seabiosUpgrade libguestfs-man-pages-ukUpgrade libvirt-libs-debuginfoUpgrade libssh2-debugsourceUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-imgUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-dbus-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade hivex-debugsourceUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-config-networkUpgrade virt-p2v-makerUpgrade libiscsi-utils-debuginfoUpgrade perl-hivex-debuginfoUpgrade ruby-libguestfsUpgrade libguestfs-inspect-iconsUpgrade SLOFUpgrade libiscsiUpgrade libvirt-nssUpgrade virt-dib-debuginfoUpgrade netcfUpgrade libiscsi-utilsUpgrade libguestfs-gobject-develUpgrade qemu-guest-agent-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-rescueUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade ruby-hivexUpgrade nbdkit-plugin-python-commonUpgrade virt-dibUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-debuginfoUpgrade libiscsi-debugsourceUpgrade sgabiosUpgrade libvirt-debuginfoUpgrade libvirt-dbusUpgrade nbdkit-plugin-xzUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-debugsourceUpgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcf-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade perl-hivexUpgrade netcf-develUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-xfsUpgrade supermin-debugsourceUpgrade virt-v2vUpgrade libvirt-docsUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libssh2Upgrade libguestfs-rsyncUpgrade libguestfs-java-debuginfoUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-libsUpgrade nbdkit-bash-completionUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade superminUpgrade netcf-libs-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-tools-cUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-toolsUpgrade nbdkitUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-admin-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-interfaceUpgrade python3-libguestfsUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libssh2-docsUpgrade qemu-kvm-block-rbdUpgrade perl-Sys-VirtUpgrade libvirt-daemonUpgrade libiscsi-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade seavgabios-binUpgrade nbdkit-example-plugins-debuginfo | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub