A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-docsUpgrade libssh2-develUpgrade libssh2 | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-winsupportUpgrade libguestfs-benchmarkingUpgrade libguestfsUpgrade libguestfs-bash-completionUpgrade libguestfs-gobjectUpgrade libguestfs-man-pages-jaUpgrade libvirtUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-debugsourceUpgrade netcf-libs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libiscsi-utilsUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gobject-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvmUpgrade libvirt-dbus-debuginfoUpgrade libvirt-develUpgrade supermin-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libssh2-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-adminUpgrade libguestfs-inspect-iconsUpgrade python3-hivex-debuginfoUpgrade libguestfs-tools-cUpgrade libssh2-debugsourceUpgrade lua-guestfs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-sshUpgrade libvirt-bash-completionUpgrade libvirt-client-debuginfoUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-python3Upgrade python3-hivexUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-libs-debuginfoUpgrade libssh2-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade perl-hivex-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade virt-dib-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libiscsiUpgrade python3-libguestfs-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-develUpgrade nbdkit-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-networkUpgrade netcfUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-gfs2Upgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade hivexUpgrade libvirt-docsUpgrade nbdkit-basic-pluginsUpgrade netcf-develUpgrade nbdkitUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-commonUpgrade libvirt-daemon-debuginfoUpgrade virt-v2vUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-vddkUpgrade supermin-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-javaUpgrade sgabiosUpgrade libguestfs-java-develUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-coreUpgrade seavgabios-binUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade virt-dibUpgrade ruby-hivex-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libssh2-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-develUpgrade libssh2Upgrade libvirt-daemon-driver-storage-diskUpgrade hivex-debugsourceUpgrade seabios-binUpgrade ruby-libguestfsUpgrade libvirt-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-debugsourceUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade perl-hivexUpgrade libvirt-daemon-driver-network-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade seabiosUpgrade libvirt-nssUpgrade nbdkit-debugsourceUpgrade ruby-hivexUpgrade lua-guestfsUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-debugsourceUpgrade virt-v2v-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade sgabios-binUpgrade libguestfs-toolsUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade superminUpgrade netcf-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libiscsi-develUpgrade libvirt-libsUpgrade hivex-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-xz-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade virt-p2v-makerUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javadoc | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libvirt-libsUpgrade qemu-kvm-block-curlUpgrade hivex-develUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nssUpgrade nbdkit-example-pluginsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-xzUpgrade libvirt-clientUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-networkUpgrade virt-v2vUpgrade virt-dibUpgrade netcfUpgrade libvirt-daemonUpgrade qemu-kvm-block-glusterUpgrade seabiosUpgrade libguestfs-xfsUpgrade python3-hivexUpgrade seabios-binUpgrade libguestfs-rescueUpgrade libguestfs-man-pages-ukUpgrade libssh2Upgrade python3-libguestfsUpgrade supermin-develUpgrade superminUpgrade perl-hivexUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-python3Upgrade ruby-hivexUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-p2v-makerUpgrade python3-libvirtUpgrade qemu-kvm-commonUpgrade lua-guestfsUpgrade libguestfs-toolsUpgrade libvirt-docsUpgrade libiscsi-develUpgrade libvirt-develUpgrade libssh2-docsUpgrade libguestfs-inspect-iconsUpgrade libvirt-adminUpgrade sgabiosUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-utilsUpgrade qemu-kvm-block-sshUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade libguestfsUpgrade libguestfs-rsyncUpgrade hivexUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-diskUpgrade sgabios-binUpgrade nbdkit-develUpgrade qemu-kvmUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsiUpgrade qemu-kvm-block-iscsiUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-lock-sanlockUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-javaUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirtUpgrade libguestfs-gobject-develUpgrade libssh2-develUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agentUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-tools-cUpgrade ruby-libguestfsUpgrade nbdkit-plugin-gzipUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libguestfs-winsupport | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-toolsUpgrade superminUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-core-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-debugsourceUpgrade lua-guestfs-debuginfoUpgrade perl-hivex-debuginfoUpgrade sgabiosUpgrade perl-hivexUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-libguestfsUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade supermin-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-nssUpgrade seabiosUpgrade python3-hivexUpgrade nbdkit-plugin-gzipUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade virt-dib-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade seavgabios-binUpgrade netcf-develUpgrade libssh2-docsUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade hivexUpgrade libiscsi-debuginfoUpgrade hivex-debugsourceUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade supermin-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-docsUpgrade ruby-libguestfsUpgrade qemu-kvm-coreUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirtUpgrade libvirt-lock-sanlockUpgrade virt-v2v-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-bash-completionUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-winsupportUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-javaUpgrade SLOFUpgrade libvirt-clientUpgrade libvirt-libs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-utilsUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade seabios-binUpgrade qemu-kvm-block-curlUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-rbd-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-develUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade hivex-develUpgrade libssh2-debuginfoUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-pluginsUpgrade qemu-kvmUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libssh2-debugsourceUpgrade libguestfs-xfsUpgrade nbdkit-plugin-xzUpgrade libguestfs-java-develUpgrade virt-v2vUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-benchmarkingUpgrade libvirt-admin-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libssh2Upgrade libvirt-daemonUpgrade libvirt-adminUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade virt-dibUpgrade supermin-develUpgrade nbdkit-bash-completionUpgrade nbdkit-plugin-vddkUpgrade netcf-libsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libvirtUpgrade nbdkit-example-plugins-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-rsyncUpgrade python3-libvirt-debuginfoUpgrade netcfUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-debugsourceUpgrade netcf-debuginfoUpgrade libguestfs-gobject-develUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfsUpgrade nbdkit-plugin-python3Upgrade libguestfs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-gfs2Upgrade sgabios-binUpgrade nbdkit-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-glusterUpgrade libssh2-develUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-devel | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1Upgrade libssh2-1-32bitUpgrade libssh2-develUpgrade libssh2-1-x86 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub