A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2 | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-libs-debuginfoUpgrade python3-libguestfsUpgrade qemu-img-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobjectUpgrade perl-hivex-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-bash-completionUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rsyncUpgrade supermin-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemonUpgrade libvirt-clientUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsi-utilsUpgrade libvirt-develUpgrade qemu-kvm-block-rbdUpgrade nbdkit-example-pluginsUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-python-commonUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-rescueUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-benchmarkingUpgrade python3-libvirtUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-curlUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-winsupportUpgrade python3-hivex-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-bash-completionUpgrade nbdkit-develUpgrade nbdkit-debuginfoUpgrade libguestfs-tools-cUpgrade qemu-kvmUpgrade qemu-kvm-block-sshUpgrade libvirt-client-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libssh2-develUpgrade netcfUpgrade libvirt-bash-completionUpgrade libvirt-adminUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-python3Upgrade qemu-guest-agentUpgrade libguestfs-debuginfoUpgrade libvirt-lock-sanlockUpgrade lua-guestfs-debuginfoUpgrade libvirt-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade supermin-develUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-debugsourceUpgrade qemu-imgUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade seabiosUpgrade libvirt-nss-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-javadocUpgrade netcf-debugsourceUpgrade hivex-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade ruby-hivexUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-develUpgrade perl-Sys-VirtUpgrade virt-v2vUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storageUpgrade perl-hivexUpgrade qemu-kvm-commonUpgrade libvirt-dbusUpgrade libguestfs-gfs2Upgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsi-debugsourceUpgrade virt-dibUpgrade nbdkit-example-plugins-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-debugsourceUpgrade supermin-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-secretUpgrade libssh2Upgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libguestfs-toolsUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade virt-v2v-debuginfoUpgrade sgabios-binUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-develUpgrade libvirt-admin-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivexUpgrade libvirt-libsUpgrade nbdkitUpgrade netcf-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-basic-pluginsUpgrade superminUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade hivex-debugsourceUpgrade libguestfs-javaUpgrade libguestfs-java-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade netcf-libsUpgrade seabios-binUpgrade qemu-kvm-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libguestfs-rescueUpgrade libssh2Upgrade lua-guestfsUpgrade seabios-binUpgrade libguestfs-toolsUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade libssh2-docsUpgrade qemu-kvm-commonUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-curlUpgrade hivex-develUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-xzUpgrade libvirt-nssUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbusUpgrade libvirt-libsUpgrade python3-libguestfsUpgrade libvirt-docsUpgrade libguestfs-javadocUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade virt-v2vUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-networkUpgrade python3-libvirtUpgrade seabiosUpgrade virt-p2v-makerUpgrade superminUpgrade libvirt-daemonUpgrade netcf-libsUpgrade ruby-hivexUpgrade nbdkit-plugin-python3Upgrade sgabiosUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade virt-dibUpgrade libguestfs-man-pages-ukUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsi-develUpgrade netcfUpgrade nbdkit-plugin-vddkUpgrade seavgabios-binUpgrade libguestfs-inspect-iconsUpgrade libguestfs-xfsUpgrade supermin-develUpgrade python3-hivexUpgrade libssh2-develUpgrade libguestfs-rsyncUpgrade qemu-kvm-block-rbdUpgrade libiscsiUpgrade qemu-kvm-block-sshUpgrade libguestfs-man-pages-jaUpgrade hivexUpgrade sgabios-binUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvmUpgrade nbdkit-basic-pluginsUpgrade libguestfs-winsupportUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade nbdkit-plugin-gzipUpgrade libguestfsUpgrade netcf-develUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-javaUpgrade libguestfs-gobjectUpgrade nbdkit-bash-completionUpgrade nbdkit-develUpgrade libguestfs-gobject-develUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-guest-agentUpgrade libvirtUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utils | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade nbdkit-example-pluginsUpgrade seabios-binUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade libssh2-debuginfoUpgrade qemu-kvmUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-java-debuginfoUpgrade qemu-guest-agentUpgrade SLOFUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-kvmUpgrade libiscsi-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libssh2Upgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-python3Upgrade netcf-libsUpgrade nbdkitUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-bash-completionUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade virt-p2v-makerUpgrade qemu-kvm-commonUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2-debugsourceUpgrade libvirt-develUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-benchmarkingUpgrade libguestfs-winsupportUpgrade libguestfs-tools-cUpgrade supermin-develUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade hivex-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade netcf-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade netcfUpgrade qemu-kvm-block-curlUpgrade hivex-develUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemonUpgrade python3-hivex-debuginfoUpgrade libiscsi-utilsUpgrade virt-v2vUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-bash-completionUpgrade virt-dibUpgrade python3-libvirt-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-dbusUpgrade sgabios-binUpgrade libssh2-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-client-debuginfoUpgrade netcf-debugsourceUpgrade libguestfs-gobject-develUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-debugsourceUpgrade libguestfs-debugsourceUpgrade libguestfs-java-develUpgrade libguestfs-man-pages-ukUpgrade libvirt-clientUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade seabiosUpgrade libguestfs-toolsUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade virt-dib-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade ruby-hivex-debuginfoUpgrade libvirt-docsUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libiscsi-debugsourceUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-libsUpgrade python3-hivexUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade hivex-debugsourceUpgrade supermin-debugsourceUpgrade supermin-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-debugsourceUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libssh2-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libiscsiUpgrade qemu-kvm-coreUpgrade seavgabios-binUpgrade hivexUpgrade nbdkit-develUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade ruby-libguestfsUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-python-commonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-networkUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade superminUpgrade lua-guestfsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-sshUpgrade qemu-imgUpgrade libvirt-nss-debuginfoUpgrade perl-hivex-debuginfoUpgrade sgabiosUpgrade nbdkit-basic-pluginsUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-gzip-debuginfo | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub