A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2Upgrade libssh2-docsUpgrade libssh2-develUpgrade libssh2-debuginfo | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-imgUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade virt-dibUpgrade ruby-hivex-debuginfoUpgrade hivex-debugsourceUpgrade nbdkit-basic-pluginsUpgrade libssh2Upgrade netcf-develUpgrade qemu-kvm-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-dbusUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade seavgabios-binUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-java-develUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade sgabios-binUpgrade sgabiosUpgrade supermin-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-develUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade seabiosUpgrade virt-v2vUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libssh2-docsUpgrade lua-guestfsUpgrade perl-hivexUpgrade supermin-develUpgrade libvirt-daemon-kvmUpgrade superminUpgrade ruby-libguestfsUpgrade seabios-binUpgrade nbdkit-debugsourceUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-javaUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-docsUpgrade netcf-debugsourceUpgrade libguestfs-javadocUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libiscsi-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade virt-p2v-makerUpgrade libiscsi-debugsourceUpgrade libiscsi-debuginfoUpgrade nbdkitUpgrade libguestfs-xfsUpgrade libvirt-libsUpgrade hivexUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-gluster-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-admin-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-winsupportUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-adminUpgrade libguestfs-rescueUpgrade libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-common-debuginfoUpgrade python3-libvirtUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-debuginfoUpgrade nbdkit-develUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade netcfUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-libs-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-ukUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade netcf-libs-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-glusterUpgrade libvirtUpgrade perl-hivex-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-benchmarking-debuginfoUpgrade libiscsiUpgrade libvirt-dbus-debuginfoUpgrade libvirt-develUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-rsyncUpgrade supermin-debuginfoUpgrade qemu-kvm-block-rbdUpgrade virt-dib-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemonUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libguestfs-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-example-pluginsUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-bash-completionUpgrade perl-Sys-Virt-debugsourceUpgrade libssh2-debuginfoUpgrade libssh2-debugsourceUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade lua-guestfs-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-lock-sanlockUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-plugin-python3Upgrade nbdkit-plugin-gzipUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libssh2-develUpgrade libguestfs-inspect-iconsUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-sshUpgrade python3-hivexUpgrade qemu-kvmUpgrade libvirt-bash-completionUpgrade qemu-guest-agent-debuginfo | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade libssh2Upgrade linux-c7-libssh2Upgrade linux-c6-libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade libguestfs-java-develUpgrade libiscsi-utilsUpgrade libguestfs-winsupportUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-develUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-iscsiUpgrade qemu-imgUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade libguestfs-benchmarkingUpgrade libvirtUpgrade libguestfs-gobject-develUpgrade libssh2-develUpgrade qemu-kvmUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-python-commonUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivexUpgrade perl-Sys-GuestfsUpgrade libguestfs-rsyncUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-jaUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-sshUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-gzipUpgrade libguestfs-tools-cUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsiUpgrade libguestfs-javaUpgrade nbdkit-develUpgrade libguestfs-gobjectUpgrade libssh2Upgrade libguestfs-inspect-iconsUpgrade virt-dibUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade supermin-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libsUpgrade libiscsi-develUpgrade libvirt-adminUpgrade perl-Sys-VirtUpgrade libguestfs-xfsUpgrade qemu-kvm-block-glusterUpgrade seabios-binUpgrade perl-hivexUpgrade libguestfs-rescueUpgrade qemu-kvm-commonUpgrade libvirt-clientUpgrade hivex-develUpgrade nbdkit-plugin-python3Upgrade virt-p2v-makerUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-bash-completionUpgrade libssh2-docsUpgrade libvirt-docsUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade netcfUpgrade libvirt-dbusUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xzUpgrade ruby-hivexUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-toolsUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javadocUpgrade qemu-kvm-block-curlUpgrade python3-libguestfsUpgrade python3-hivexUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade superminUpgrade nbdkit-plugin-vddkUpgrade sgabiosUpgrade python3-libvirtUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-gfs2Upgrade libvirt-daemon-kvmUpgrade libvirt-nssUpgrade seabiosUpgrade virt-v2v | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade libguestfs-winsupportUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-gfs2Upgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade SLOFUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-clientUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-dbusUpgrade libvirt-admin-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-javaUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-kvmUpgrade libvirt-client-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade virt-p2v-makerUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-libs-debuginfoUpgrade hivex-develUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libssh2Upgrade libguestfsUpgrade libguestfs-java-develUpgrade libguestfs-javadocUpgrade libguestfs-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-gluster-debuginfoUpgrade netcf-libsUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-vddkUpgrade python3-libvirtUpgrade libguestfs-gobject-develUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade netcfUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-man-pages-ukUpgrade qemu-kvmUpgrade qemu-kvm-debugsourceUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libssh2-debugsourceUpgrade nbdkit-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade sgabios-binUpgrade supermin-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-v2vUpgrade nbdkitUpgrade libvirt-daemon-config-networkUpgrade nbdkit-bash-completionUpgrade virt-dibUpgrade libguestfs-rsyncUpgrade libssh2-debuginfoUpgrade perl-Sys-VirtUpgrade python3-libvirt-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-guest-agentUpgrade python3-libguestfs-debuginfoUpgrade libiscsi-utilsUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-xzUpgrade libguestfs-develUpgrade hivex-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemonUpgrade seabios-binUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-xfsUpgrade libssh2-develUpgrade libvirt-bash-completionUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nwfilterUpgrade perl-hivex-debuginfoUpgrade libvirt-debuginfoUpgrade libiscsiUpgrade qemu-kvm-block-ssh-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade supermin-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-lock-sanlockUpgrade ruby-hivexUpgrade qemu-kvm-coreUpgrade virt-dib-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-docsUpgrade libiscsi-utils-debuginfoUpgrade libvirtUpgrade ruby-libguestfsUpgrade perl-Sys-GuestfsUpgrade libiscsi-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-basic-pluginsUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-gzipUpgrade superminUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade lua-guestfsUpgrade qemu-guest-agent-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python3-debuginfoUpgrade perl-hivexUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-common-debuginfoUpgrade sgabiosUpgrade libssh2-docsUpgrade libguestfs-toolsUpgrade libvirt-debugsourceUpgrade nbdkit-debugsourceUpgrade libguestfs-gobjectUpgrade libguestfs-gobject-debuginfoUpgrade qemu-imgUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-hivexUpgrade nbdkit-develUpgrade seavgabios-binUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade python3-libguestfsUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-logicalUpgrade seabiosUpgrade libguestfs-bash-completionUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-xz-debuginfo | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade libssh2-develUpgrade libssh2-1-x86Upgrade libssh2-1Upgrade libssh2-1-32bit | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade libssh2-1 (Ubuntu Pro) | Mar 22, 2023 | Mar 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub