An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libssh2 | Mar 22, 2019 | Mar 21, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libssh2amazon-linux-ami-2-upgrade-libssh2-debuginfoamazon-linux-ami-2-upgrade-libssh2-develamazon-linux-ami-2-upgrade-libssh2-docs | Apr 27, 2020 | Mar 21, 2019 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 21, 2019 |
| Centos_linux | — | centos-upgrade-libssh2centos-upgrade-libssh2-debuginfocentos-upgrade-libssh2-develcentos-upgrade-libssh2-docs | Aug 28, 2019 | Mar 21, 2019 |
| Debian | debian-upgrade-libssh2 | Mar 27, 2019 | Mar 21, 2019 | |
| Freebsd | freebsd-upgrade-package-libssh2freebsd-upgrade-package-linux-c6-libssh2freebsd-upgrade-package-linux-c7-libssh2 | Apr 19, 2019 | Apr 18, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libssh2 | May 1, 2019 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libssh2 | May 1, 2019 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libssh2 | May 1, 2019 | Mar 21, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-libssh2-1-8-2-11-4-11-0-1-1-0 | Jul 17, 2019 | Mar 21, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-libssh2oracle-linux-upgrade-libssh2-develoracle-linux-upgrade-libssh2-docs | Jul 21, 2020 | Mar 13, 2019 |
| Redhat_linux | — | redhat-upgrade-libssh2redhat-upgrade-libssh2-debuginforedhat-upgrade-libssh2-develredhat-upgrade-libssh2-docs | Aug 7, 2019 | Mar 21, 2019 |
| Suse | — | suse-upgrade-libssh2-1suse-upgrade-libssh2-1-32bitsuse-upgrade-libssh2-1-x86suse-upgrade-libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | ubuntu-pro-upgrade-libssh2-1 | Mar 22, 2023 | Mar 21, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub