A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2 | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libiscsi-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade seavgabios-binUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-nss-debuginfoUpgrade libguestfs-javadocUpgrade ruby-hivexUpgrade netcf-libsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storageUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-hivex-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-lock-sanlock-debuginfoUpgrade hivex-debugsourceUpgrade libiscsi-develUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-vddkUpgrade superminUpgrade libssh2-docsUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-docsUpgrade sgabiosUpgrade libguestfs-tools-c-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-config-networkUpgrade virt-p2v-makerUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-libsUpgrade perl-hivexUpgrade qemu-kvm-commonUpgrade hivex-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade hivexUpgrade libguestfs-gfs2Upgrade nbdkit-debugsourceUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-xfsUpgrade nbdkitUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-nssUpgrade seabiosUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade virt-v2vUpgrade perl-Sys-VirtUpgrade libguestfs-debugsourceUpgrade qemu-imgUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-debugsourceUpgrade libvirt-admin-debuginfoUpgrade seabios-binUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade sgabios-binUpgrade netcf-develUpgrade virt-v2v-debuginfoUpgrade ruby-libguestfsUpgrade supermin-develUpgrade libvirt-daemon-kvmUpgrade libguestfs-tools-cUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-iscsiUpgrade perl-hivex-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-glusterUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvmUpgrade qemu-kvm-common-debuginfoUpgrade python3-libvirtUpgrade perl-Sys-GuestfsUpgrade nbdkit-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade netcfUpgrade libvirt-daemonUpgrade libguestfs-inspect-iconsUpgrade python3-hivexUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-rbdUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-sshUpgrade libssh2-develUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-client-debuginfoUpgrade libguestfs-rescueUpgrade libssh2-debuginfoUpgrade libiscsiUpgrade supermin-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-python3Upgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-develUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-clientUpgrade libiscsi-utilsUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-bash-completionUpgrade netcf-libs-debuginfoUpgrade libvirtUpgrade virt-dib-debuginfoUpgrade libguestfs-winsupportUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-img-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade python3-libguestfsUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-lock-sanlockUpgrade libguestfs-bash-completionUpgrade libvirt-adminUpgrade libguestfsUpgrade lua-guestfs-debuginfoUpgrade libssh2-debugsourceUpgrade nbdkit-example-pluginsUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-ssh-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libvirt-clientUpgrade qemu-kvm-commonUpgrade libguestfs-bash-completionUpgrade libguestfs-toolsUpgrade virt-dibUpgrade libssh2-docsUpgrade libvirt-docsUpgrade ruby-hivexUpgrade libguestfs-man-pages-ukUpgrade libvirt-adminUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storageUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade libguestfs-inspect-iconsUpgrade libguestfs-xfsUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rescueUpgrade python3-libguestfsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsi-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-plugin-vddkUpgrade superminUpgrade sgabiosUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-dbusUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-curlUpgrade perl-hivexUpgrade seavgabios-binUpgrade nbdkit-example-pluginsUpgrade virt-p2v-makerUpgrade netcfUpgrade virt-v2vUpgrade nbdkit-plugin-xzUpgrade python3-libvirtUpgrade libssh2Upgrade libvirt-nssUpgrade seabios-binUpgrade hivex-develUpgrade libvirt-libsUpgrade seabiosUpgrade qemu-kvm-coreUpgrade libguestfs-javaUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-iscsiUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvmUpgrade libguestfs-tools-cUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agentUpgrade nbdkit-plugin-python-commonUpgrade libvirtUpgrade libssh2-develUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-rbdUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libguestfs-winsupportUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade libguestfsUpgrade ruby-libguestfsUpgrade hivexUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-sshUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade libiscsiUpgrade libguestfs-gobjectUpgrade nbdkit-devel | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-rescueUpgrade qemu-kvm-block-sshUpgrade libvirt-debugsourceUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-toolsUpgrade sgabiosUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-plugin-gzipUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-bash-completionUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade supermin-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-libsUpgrade hivexUpgrade qemu-img-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-rbdUpgrade ruby-hivexUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libiscsi-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libiscsi-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-block-glusterUpgrade lua-guestfs-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libiscsiUpgrade perl-Sys-Guestfs-debuginfoUpgrade seavgabios-binUpgrade nbdkit-develUpgrade libvirt-docsUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirtUpgrade python3-hivexUpgrade qemu-kvm-core-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-coreUpgrade netcf-libs-debuginfoUpgrade seabiosUpgrade qemu-imgUpgrade netcf-develUpgrade ruby-libguestfsUpgrade perl-Sys-GuestfsUpgrade lua-guestfsUpgrade supermin-debugsourceUpgrade superminUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-curlUpgrade netcf-debuginfoUpgrade libguestfs-javaUpgrade libssh2-develUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-pluginsUpgrade seabios-binUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storageUpgrade hivex-develUpgrade libvirt-admin-debuginfoUpgrade libguestfs-java-develUpgrade libguestfsUpgrade libguestfs-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libssh2Upgrade libguestfs-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-debuginfoUpgrade SLOFUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade supermin-develUpgrade nbdkit-plugin-vddkUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-winsupportUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-benchmarkingUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-diskUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libguestfs-gobject-develUpgrade libvirt-adminUpgrade netcfUpgrade libvirt-daemonUpgrade libssh2-debuginfoUpgrade perl-Sys-VirtUpgrade python3-libvirt-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-debuginfoUpgrade sgabios-binUpgrade libguestfs-gfs2Upgrade virt-v2vUpgrade libguestfs-xfsUpgrade libguestfs-javadocUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-xzUpgrade libvirt-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-iscsiUpgrade nbdkitUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-bash-completionUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-guest-agentUpgrade netcf-debugsourceUpgrade qemu-kvmUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-dibUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-rsyncUpgrade python3-libvirtUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-man-pages-ukUpgrade virt-p2v-makerUpgrade libssh2-debugsourceUpgrade libguestfs-tools-c | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-32bitUpgrade libssh2-1Upgrade libssh2-develUpgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub