A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-develUpgrade libssh2-debuginfoUpgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-clientUpgrade supermin-debuginfoUpgrade libvirt-develUpgrade libguestfs-gobject-develUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-python-commonUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-libs-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-img-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-debugsourceUpgrade libguestfs-tools-cUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-common-debuginfoUpgrade netcfUpgrade qemu-guest-agent-debuginfoUpgrade libssh2-develUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-bash-completionUpgrade netcf-libs-debuginfoUpgrade libguestfsUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-sshUpgrade lua-guestfs-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-adminUpgrade libguestfs-bash-completionUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-client-debuginfoUpgrade python3-hivexUpgrade perl-Sys-Virt-debugsourceUpgrade libvirtUpgrade libiscsiUpgrade libguestfs-gobjectUpgrade perl-hivex-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-glusterUpgrade ruby-libguestfs-debuginfoUpgrade virt-dib-debuginfoUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-curlUpgrade libguestfs-man-pages-jaUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-bash-completionUpgrade libguestfs-benchmarkingUpgrade libguestfs-inspect-iconsUpgrade qemu-kvmUpgrade ruby-hivex-debuginfoUpgrade qemu-imgUpgrade virt-v2vUpgrade virt-dibUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-javadocUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libssh2-docsUpgrade libssh2Upgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade supermin-develUpgrade seabios-binUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-debugsourceUpgrade ruby-libguestfsUpgrade qemu-kvm-commonUpgrade ruby-hivexUpgrade seavgabios-binUpgrade libvirt-dbusUpgrade libguestfs-gfs2Upgrade libguestfs-javaUpgrade netcf-develUpgrade virt-v2v-debuginfoUpgrade sgabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-nss-debuginfoUpgrade virt-p2v-makerUpgrade netcf-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libiscsi-debuginfoUpgrade libiscsi-develUpgrade libguestfs-java-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade lua-guestfsUpgrade seabiosUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade sgabiosUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storageUpgrade perl-Sys-Virt-debuginfoUpgrade perl-hivexUpgrade nbdkit-debugsourceUpgrade netcf-libsUpgrade libvirt-nssUpgrade superminUpgrade nbdkitUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivexUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivex-debugsourceUpgrade supermin-debugsourceUpgrade libguestfs-java-devel | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-block-sshUpgrade libiscsiUpgrade libiscsi-utilsUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-guest-agentUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade nbdkitUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-python-commonUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobjectUpgrade nbdkit-bash-completionUpgrade nbdkit-develUpgrade libguestfs-tools-cUpgrade nbdkit-plugin-gzipUpgrade libvirt-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-javaUpgrade sgabios-binUpgrade ruby-libguestfsUpgrade qemu-kvmUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-basic-pluginsUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlockUpgrade libguestfs-rsyncUpgrade libguestfs-winsupportUpgrade hivexUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-java-develUpgrade netcf-develUpgrade ruby-hivexUpgrade libguestfs-inspect-iconsUpgrade libguestfs-rescueUpgrade perl-hivexUpgrade libssh2Upgrade qemu-kvm-block-glusterUpgrade virt-dibUpgrade netcf-libsUpgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade python3-libvirtUpgrade libguestfs-gfs2Upgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javadocUpgrade hivex-develUpgrade libvirt-develUpgrade libiscsi-develUpgrade nbdkit-plugin-xzUpgrade nbdkit-example-pluginsUpgrade libguestfs-xfsUpgrade perl-Sys-VirtUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-python3Upgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade supermin-develUpgrade superminUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade sgabiosUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade virt-p2v-makerUpgrade virt-v2vUpgrade seavgabios-binUpgrade seabiosUpgrade libvirt-daemon-driver-networkUpgrade netcfUpgrade lua-guestfsUpgrade libvirt-clientUpgrade libssh2-docsUpgrade libguestfs-bash-completionUpgrade qemu-kvm-commonUpgrade libvirt-docsUpgrade libguestfs-toolsUpgrade seabios-bin | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade ruby-libguestfsUpgrade libvirtUpgrade superminUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade qemu-kvm-core-debuginfoUpgrade netcf-libs-debuginfoUpgrade libiscsiUpgrade hivex-debugsourceUpgrade supermin-debugsourceUpgrade libvirt-docsUpgrade lua-guestfs-debuginfoUpgrade libvirt-debuginfoUpgrade virt-dib-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-v2v-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade python3-hivexUpgrade qemu-kvm-block-glusterUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade hivexUpgrade libguestfs-bash-completionUpgrade nbdkit-plugin-xz-debuginfoUpgrade python3-libguestfsUpgrade perl-Sys-GuestfsUpgrade seabiosUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-python3-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libiscsi-debuginfoUpgrade supermin-debuginfoUpgrade qemu-imgUpgrade netcf-develUpgrade qemu-kvm-block-rbdUpgrade libiscsi-debugsourceUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-sshUpgrade libvirt-debugsourceUpgrade libssh2-docsUpgrade lua-guestfsUpgrade libguestfs-inspect-iconsUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade libguestfs-gobject-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-coreUpgrade sgabiosUpgrade libvirt-lock-sanlockUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gobjectUpgrade ruby-hivexUpgrade libvirt-nss-debuginfoUpgrade libguestfs-toolsUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-example-plugins-debuginfoUpgrade python3-libvirt-debuginfoUpgrade netcfUpgrade libvirt-daemon-config-nwfilterUpgrade libssh2-debugsourceUpgrade libguestfs-tools-cUpgrade libvirt-libs-debuginfoUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-python3Upgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-commonUpgrade libguestfs-develUpgrade python3-hivex-debuginfoUpgrade SLOFUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade qemu-kvm-block-gluster-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-diskUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-client-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-block-curlUpgrade libguestfs-gobject-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-kvmUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-xfsUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade perl-Sys-Virt-debugsourceUpgrade netcf-libsUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-dbusUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvmUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-pluginsUpgrade libguestfs-javaUpgrade python3-libguestfs-debuginfoUpgrade libssh2-develUpgrade libiscsi-utilsUpgrade libssh2Upgrade libguestfs-debuginfoUpgrade libguestfsUpgrade libguestfs-java-debuginfoUpgrade libvirt-admin-debuginfoUpgrade perl-Sys-VirtUpgrade virt-v2vUpgrade libssh2-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-config-networkUpgrade virt-dibUpgrade libvirt-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade sgabios-binUpgrade libvirt-daemonUpgrade libguestfs-gfs2Upgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade virt-p2v-makerUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-debugsourceUpgrade nbdkitUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-winsupportUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-javadocUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-dbus-debugsourceUpgrade netcf-debugsourceUpgrade libvirt-develUpgrade hivex-debuginfoUpgrade qemu-kvm-block-iscsi | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub