A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2 | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libssh2-docsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libssh2Upgrade nbdkitUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-lock-sanlock-debuginfoUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-nss-debuginfoUpgrade hivex-debuginfoUpgrade nbdkit-plugin-xzUpgrade sgabiosUpgrade seabios-binUpgrade superminUpgrade libguestfs-tools-c-debuginfoUpgrade supermin-develUpgrade libvirt-dbus-debugsourceUpgrade perl-Sys-Virt-debuginfoUpgrade ruby-hivexUpgrade libvirt-dbusUpgrade qemu-kvm-commonUpgrade libguestfs-gfs2Upgrade libiscsi-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-xfsUpgrade ruby-hivex-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-dibUpgrade hivex-debugsourceUpgrade libguestfs-develUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libiscsi-develUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade supermin-debugsourceUpgrade libguestfs-javaUpgrade nbdkit-plugin-vddkUpgrade qemu-imgUpgrade libvirt-daemon-config-nwfilterUpgrade ruby-libguestfsUpgrade libguestfs-debugsourceUpgrade netcf-develUpgrade nbdkit-debugsourceUpgrade netcf-libsUpgrade libiscsi-debuginfoUpgrade libguestfs-java-debuginfoUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-java-develUpgrade qemu-kvm-coreUpgrade perl-Sys-VirtUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-admin-debuginfoUpgrade perl-hivexUpgrade virt-v2vUpgrade seabiosUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-nssUpgrade lua-guestfsUpgrade libvirt-daemonUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade hivex-develUpgrade python3-libguestfs-debuginfoUpgrade python3-libguestfsUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-benchmarkingUpgrade libssh2-debugsourceUpgrade libguestfs-winsupportUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfsUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-rbdUpgrade python3-libvirt-debuginfoUpgrade libvirt-lock-sanlockUpgrade libssh2-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-clientUpgrade libvirt-adminUpgrade libiscsi-utilsUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-man-pages-ukUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-gobjectUpgrade nbdkit-debuginfoUpgrade netcfUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-sshUpgrade qemu-kvmUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-python3Upgrade python3-hivexUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-inspect-iconsUpgrade libguestfs-tools-cUpgrade qemu-kvm-common-debuginfoUpgrade libssh2-develUpgrade perl-hivex-debuginfoUpgrade libiscsiUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirtUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-glusterUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-networkUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade python3-libvirtUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-devel | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade linux-c7-libssh2Upgrade libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade supermin-develUpgrade libvirt-daemon-driver-interfaceUpgrade virt-dibUpgrade libvirt-daemon-driver-qemuUpgrade virt-p2v-makerUpgrade libguestfs-gfs2Upgrade sgabiosUpgrade libvirt-daemon-kvmUpgrade seabiosUpgrade virt-v2vUpgrade seavgabios-binUpgrade libvirt-develUpgrade python3-libvirtUpgrade libvirt-adminUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade nbdkit-plugin-vddkUpgrade libguestfs-rescueUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-networkUpgrade netcfUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-python3Upgrade netcf-libsUpgrade libguestfs-inspect-iconsUpgrade libvirt-docsUpgrade ruby-hivexUpgrade lua-guestfsUpgrade perl-Sys-VirtUpgrade qemu-kvm-commonUpgrade libguestfs-bash-completionUpgrade libvirt-clientUpgrade libssh2-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade libiscsi-develUpgrade python3-hivexUpgrade superminUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libssh2Upgrade nbdkit-example-pluginsUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libguestfs-javadocUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivex-develUpgrade libvirt-dbusUpgrade nbdkit-plugin-xzUpgrade hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-rsyncUpgrade libvirt-lock-sanlockUpgrade sgabios-binUpgrade libguestfs-man-pages-jaUpgrade qemu-imgUpgrade libvirtUpgrade libiscsi-utilsUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agentUpgrade libssh2-develUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobject-develUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-gzipUpgrade libguestfs-winsupportUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade ruby-libguestfsUpgrade nbdkitUpgrade libguestfs-tools-cUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-javaUpgrade nbdkit-bash-completionUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-iscsiUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfsUpgrade qemu-kvmUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-Guestfs | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade lua-guestfs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade ruby-hivex-debuginfoUpgrade hivexUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-debugsourceUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade superminUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-debuginfoUpgrade netcf-develUpgrade python3-hivexUpgrade supermin-debugsourceUpgrade hivex-debugsourceUpgrade virt-dib-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-nssUpgrade ruby-libguestfsUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-coreUpgrade seabiosUpgrade python3-libguestfsUpgrade lua-guestfsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade sgabiosUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-plugin-gzipUpgrade seavgabios-binUpgrade perl-hivexUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-rescueUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirtUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-develUpgrade libssh2-docsUpgrade libvirt-lock-sanlockUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-sshUpgrade libvirt-docsUpgrade libiscsiUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-hivexUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-Sys-GuestfsUpgrade libiscsi-debugsourceUpgrade virt-v2v-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-debugsourceUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-rsyncUpgrade perl-Sys-VirtUpgrade python3-libguestfs-debuginfoUpgrade qemu-guest-agentUpgrade nbdkit-plugin-xzUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-nwfilterUpgrade sgabios-binUpgrade nbdkit-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libguestfs-gfs2Upgrade perl-Sys-Virt-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-commonUpgrade hivex-develUpgrade libguestfs-java-develUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-debuginfoUpgrade libvirt-clientUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-bash-completionUpgrade libguestfs-javaUpgrade libiscsi-develUpgrade libvirt-dbusUpgrade libssh2-develUpgrade SLOFUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvmUpgrade libguestfs-java-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade virt-dibUpgrade netcf-debugsourceUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade seabios-binUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-curlUpgrade netcfUpgrade netcf-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade libguestfs-debugsourceUpgrade virt-v2vUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-bash-completionUpgrade python3-libvirt-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade supermin-develUpgrade python3-libvirtUpgrade nbdkit-plugin-vddkUpgrade libguestfs-xfsUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-winsupportUpgrade libssh2-debugsourceUpgrade hivex-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-javadocUpgrade libvirt-dbus-debugsourceUpgrade libssh2-debuginfoUpgrade libguestfs-benchmarkingUpgrade nbdkit | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-develUpgrade libssh2-1-32bitUpgrade libssh2-1 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub