A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-docsUpgrade libssh2-debuginfoUpgrade libssh2-devel | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libiscsiUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-glusterUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python-commonUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfsUpgrade python3-hivexUpgrade libguestfs-rsyncUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-iscsiUpgrade libvirt-clientUpgrade libvirt-daemonUpgrade libguestfs-gobject-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-man-pages-jaUpgrade libvirt-lock-sanlockUpgrade libiscsi-utilsUpgrade libguestfs-rescueUpgrade libssh2-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-gobjectUpgrade libvirtUpgrade netcfUpgrade nbdkit-plugin-gzipUpgrade hivex-develUpgrade nbdkit-plugin-python3Upgrade nbdkit-develUpgrade qemu-kvm-common-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-bash-completionUpgrade libguestfs-inspect-iconsUpgrade libguestfs-benchmarkingUpgrade libvirt-bash-completionUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-client-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-winsupportUpgrade lua-guestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-adminUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-develUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libguestfs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-develUpgrade libssh2-debuginfoUpgrade python3-hivex-debuginfoUpgrade python3-libvirt-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-curlUpgrade libiscsi-utils-debuginfoUpgrade libiscsi-debugsourceUpgrade hivexUpgrade virt-p2v-makerUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-gfs2Upgrade seavgabios-binUpgrade libguestfs-javaUpgrade ruby-hivexUpgrade qemu-kvm-commonUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade supermin-debugsourceUpgrade sgabiosUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-java-develUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-v2vUpgrade perl-Sys-VirtUpgrade lua-guestfsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-debugsourceUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-coreUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-nss-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-debugsourceUpgrade seabios-binUpgrade qemu-imgUpgrade perl-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-example-plugins-debuginfoUpgrade libssh2-docsUpgrade virt-dibUpgrade ruby-hivex-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-develUpgrade libiscsi-develUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkit-plugin-python3-debuginfoUpgrade netcf-develUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-admin-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkitUpgrade superminUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade libguestfs-toolsUpgrade seabiosUpgrade libvirt-daemon-driver-network-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-libguestfsUpgrade supermin-develUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libssh2Upgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-dbusUpgrade qemu-kvm-block-gluster-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade linux-c7-libssh2Upgrade libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nssUpgrade libvirt-docsUpgrade libguestfs-bash-completionUpgrade libssh2Upgrade libguestfs-javadocUpgrade hivex-develUpgrade libguestfs-inspect-iconsUpgrade libguestfs-xfsUpgrade qemu-kvm-block-glusterUpgrade ruby-hivexUpgrade seabios-binUpgrade netcf-libsUpgrade libvirt-daemon-driver-networkUpgrade perl-hivexUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-v2vUpgrade virt-p2v-makerUpgrade netcfUpgrade seabiosUpgrade libvirt-daemon-driver-nwfilterUpgrade seavgabios-binUpgrade libguestfs-rescueUpgrade libvirt-adminUpgrade libssh2-docsUpgrade libvirt-clientUpgrade libguestfs-toolsUpgrade lua-guestfsUpgrade libvirt-dbusUpgrade libvirt-libsUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-vddkUpgrade perl-Sys-VirtUpgrade python3-libvirtUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade superminUpgrade sgabiosUpgrade supermin-develUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storageUpgrade python3-hivexUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-curlUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade virt-dibUpgrade libiscsi-develUpgrade ruby-libguestfsUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-jaUpgrade libguestfs-javaUpgrade libiscsiUpgrade qemu-kvm-block-sshUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade nbdkitUpgrade libiscsi-utilsUpgrade hivexUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-winsupportUpgrade libguestfs-java-develUpgrade libguestfsUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-python-commonUpgrade libssh2-develUpgrade libvirtUpgrade libguestfs-gobject-develUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvmUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-gobjectUpgrade nbdkit-bash-completionUpgrade libguestfs-tools-cUpgrade netcf-develUpgrade libvirt-bash-completionUpgrade libguestfs-develUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-diskUpgrade sgabios-binUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logical | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-tools-c-debuginfoUpgrade libssh2Upgrade virt-p2v-makerUpgrade libvirt-libs-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libguestfs-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-example-pluginsUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade hivex-develUpgrade libssh2-debugsourceUpgrade libguestfs-gobject-develUpgrade python3-hivex-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-bash-completionUpgrade libguestfs-javadocUpgrade libvirt-dbusUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-develUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-debugsourceUpgrade libguestfs-xfsUpgrade netcfUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-develUpgrade libvirt-adminUpgrade libguestfs-gfs2Upgrade libvirt-daemonUpgrade nbdkit-plugin-xzUpgrade libguestfsUpgrade libguestfs-javaUpgrade qemu-kvm-commonUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-curlUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python3Upgrade libguestfs-tools-cUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade supermin-develUpgrade netcf-debugsourceUpgrade nbdkit-bash-completionUpgrade libssh2-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-example-plugins-debuginfoUpgrade perl-Sys-VirtUpgrade qemu-guest-agentUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade sgabios-binUpgrade virt-v2vUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-debuginfoUpgrade netcf-libsUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade SLOFUpgrade nbdkit-plugin-vddkUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvmUpgrade libiscsi-develUpgrade python3-libvirt-debuginfoUpgrade python3-libvirtUpgrade libguestfs-java-develUpgrade nbdkitUpgrade seabiosUpgrade libguestfs-gobject-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-lock-sanlockUpgrade seavgabios-binUpgrade libvirt-docsUpgrade netcf-libs-debuginfoUpgrade libguestfs-bash-completionUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade sgabiosUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade perl-hivexUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-rescueUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-hivex-debuginfoUpgrade ruby-hivexUpgrade libguestfs-gobjectUpgrade qemu-imgUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-toolsUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-debugsourceUpgrade supermin-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirtUpgrade qemu-kvm-block-sshUpgrade superminUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-gzip-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-nss-debuginfoUpgrade libguestfs-inspect-iconsUpgrade hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libiscsi-utils-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libiscsiUpgrade nbdkit-develUpgrade hivex-debugsourceUpgrade libiscsi-debuginfoUpgrade qemu-kvm-coreUpgrade ruby-libguestfsUpgrade python3-hivexUpgrade supermin-debugsourceUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-networkUpgrade libvirt-libsUpgrade libssh2-docsUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libiscsi-debugsourceUpgrade virt-v2v-debuginfo | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-1-x86Upgrade libssh2-develUpgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub