A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docs | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-core-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-debugsourceUpgrade netcf-debugsourceUpgrade libiscsi-develUpgrade libvirt-daemon-config-networkUpgrade libiscsi-debugsourceUpgrade libvirt-dbusUpgrade ruby-hivexUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-develUpgrade libguestfs-develUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade libssh2-docsUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade sgabiosUpgrade libguestfs-tools-c-debuginfoUpgrade libssh2Upgrade perl-Sys-VirtUpgrade supermin-debugsourceUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-plugin-vddkUpgrade virt-v2vUpgrade libguestfs-java-develUpgrade netcf-libsUpgrade qemu-kvm-coreUpgrade seabiosUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade lua-guestfsUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-kvmUpgrade hivexUpgrade virt-dibUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-javaUpgrade seavgabios-binUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-nssUpgrade libguestfs-gfs2Upgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade perl-hivexUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-java-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkitUpgrade hivex-debuginfoUpgrade virt-p2v-makerUpgrade superminUpgrade libguestfs-xfsUpgrade libvirt-nss-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-javadocUpgrade libvirt-docsUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-libsUpgrade ruby-libguestfsUpgrade netcf-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-debugsourceUpgrade libvirt-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade nbdkit-plugin-xzUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-hivex-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-dbus-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-glusterUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade python3-libvirtUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-develUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade netcfUpgrade python3-hivexUpgrade nbdkit-example-pluginsUpgrade libvirt-debugsourceUpgrade python3-libvirt-debuginfoUpgrade libssh2-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-benchmarkingUpgrade libguestfs-winsupportUpgrade libvirt-adminUpgrade libssh2-debugsourceUpgrade libguestfsUpgrade libguestfs-rescueUpgrade nbdkit-plugin-python-commonUpgrade libvirt-lock-sanlockUpgrade lua-guestfs-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-client-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libssh2-develUpgrade nbdkit-plugin-gzipUpgrade libguestfs-bash-completionUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libguestfsUpgrade libguestfs-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-guest-agentUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-bash-completionUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirtUpgrade libguestfs-man-pages-jaUpgrade libiscsiUpgrade libguestfs-gobjectUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobject-develUpgrade supermin-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade libvirt-client | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade libssh2Upgrade linux-c7-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-diskUpgrade netcf-develUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-javaUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-basic-pluginsUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsi-utilsUpgrade qemu-imgUpgrade libguestfs-tools-cUpgrade libvirtUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-gobject-develUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade qemu-kvm-block-rbdUpgrade libguestfs-benchmarkingUpgrade libssh2-develUpgrade libvirt-lock-sanlockUpgrade nbdkit-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobjectUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvmUpgrade sgabios-binUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-sshUpgrade nbdkitUpgrade hivexUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsiUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade libguestfsUpgrade ruby-libguestfsUpgrade libguestfs-xfsUpgrade netcfUpgrade libvirt-adminUpgrade seavgabios-binUpgrade seabiosUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-inspect-iconsUpgrade ruby-hivexUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-python3Upgrade netcf-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-commonUpgrade libguestfs-bash-completionUpgrade libvirt-daemonUpgrade libguestfs-man-pages-ukUpgrade superminUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade python3-libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gfs2Upgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade qemu-kvm-block-curlUpgrade nbdkit-example-pluginsUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade libvirt-docsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-kvmUpgrade sgabiosUpgrade virt-dibUpgrade libguestfs-rescueUpgrade libssh2Upgrade seabios-binUpgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade libssh2-docsUpgrade supermin-develUpgrade libvirt-dbusUpgrade nbdkit-plugin-xzUpgrade lua-guestfsUpgrade libvirt-develUpgrade libguestfs-toolsUpgrade virt-p2v-makerUpgrade virt-v2v | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-develUpgrade libiscsiUpgrade ruby-libguestfsUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-coreUpgrade ruby-hivexUpgrade libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-dib-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade python3-hivexUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade virt-v2v-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-inspect-iconsUpgrade libiscsi-debugsourceUpgrade hivexUpgrade lua-guestfs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade perl-hivex-debuginfoUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-docsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-rescueUpgrade sgabiosUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade lua-guestfsUpgrade seavgabios-binUpgrade qemu-guest-agent-debuginfoUpgrade libssh2-docsUpgrade libiscsi-utils-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade netcf-develUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-imgUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-nss-debuginfoUpgrade superminUpgrade libguestfs-gobjectUpgrade nbdkit-plugin-gzipUpgrade nbdkit-basic-pluginsUpgrade libguestfs-toolsUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-rbdUpgrade perl-hivexUpgrade seabiosUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-bash-completionUpgrade supermin-debugsourceUpgrade qemu-kvm-block-sshUpgrade hivex-debugsourceUpgrade libvirt-nssUpgrade nbdkit-plugin-python3Upgrade netcf-debuginfoUpgrade nbdkit-example-pluginsUpgrade nbdkitUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-gobject-develUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade hivex-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-daemon-config-networkUpgrade python3-libvirt-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libssh2-develUpgrade libguestfs-java-develUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libguestfs-man-pages-ukUpgrade libguestfs-develUpgrade hivex-develUpgrade libvirt-dbusUpgrade python3-libvirtUpgrade nbdkit-plugin-vddkUpgrade libguestfs-debuginfoUpgrade libvirt-daemonUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade sgabios-binUpgrade seabios-binUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libiscsi-utilsUpgrade libguestfsUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-VirtUpgrade qemu-kvmUpgrade virt-dibUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-kvmUpgrade qemu-guest-agentUpgrade libguestfs-javaUpgrade libguestfs-tools-c-debuginfoUpgrade virt-p2v-makerUpgrade SLOFUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-xzUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-adminUpgrade libssh2Upgrade libvirt-libs-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-develUpgrade libvirt-client-debuginfoUpgrade supermin-develUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libssh2-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-winsupportUpgrade libguestfs-tools-cUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade virt-v2vUpgrade netcf-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-debuginfoUpgrade netcfUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-hivex-debuginfoUpgrade libguestfs-debugsource | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1Upgrade libssh2-1-32bitUpgrade libssh2-1-x86Upgrade libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub