An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libssh2 | Mar 25, 2019 | Mar 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libssh2-debuginfoUpgrade libssh2-develUpgrade libssh2-docsUpgrade libssh2 | Apr 27, 2020 | Mar 25, 2019 |
| Amazon_linux | — | Upgrade libssh2 | Aug 13, 2019 | Mar 19, 2019 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 25, 2019 | |
| Centos_linux | — | Upgrade libssh2Upgrade ruby-hivex-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-kvmUpgrade libiscsi-debugsourceUpgrade libvirt-libs-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-toolsUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storageUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nodedevUpgrade virt-dibUpgrade libguestfs-inspect-iconsUpgrade libiscsi-develUpgrade libvirt-debuginfoUpgrade libguestfs-javaUpgrade seavgabios-binUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade netcf-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-glusterUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python3-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-debugsourceUpgrade libvirt-docsUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-develUpgrade supermin-develUpgrade virt-v2vUpgrade libvirt-clientUpgrade sgabiosUpgrade seabiosUpgrade ruby-hivexUpgrade libvirt-libsUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade hivex-develUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade hivexUpgrade netcf-develUpgrade hivex-debuginfoUpgrade libguestfs-debugsourceUpgrade libguestfs-gfs2Upgrade perl-hivex-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-debugsourceUpgrade python3-libvirtUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nssUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-interfaceUpgrade hivex-debugsourceUpgrade nbdkit-plugin-xzUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-basic-pluginsUpgrade libssh2-docsUpgrade libvirt-lock-sanlock-debuginfoUpgrade qemu-imgUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvmUpgrade sgabios-binUpgrade libvirt-client-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-gobject-develUpgrade libguestfs-benchmarkingUpgrade libguestfs-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-dbusUpgrade netcf-libsUpgrade libssh2-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libiscsi-utilsUpgrade libguestfsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-debugsourceUpgrade libguestfs-develUpgrade supermin-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-bash-completionUpgrade nbdkit-plugin-gzipUpgrade nbdkit-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rescueUpgrade python3-libvirt-debuginfoUpgrade netcf-debugsourceUpgrade perl-Sys-VirtUpgrade libssh2-develUpgrade libvirt-lock-sanlockUpgrade python3-hivexUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade libguestfs-winsupportUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-basic-plugins-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemonUpgrade libguestfs-tools-cUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-sshUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-java-develUpgrade libvirt-bash-completionUpgrade libvirt-develUpgrade libvirt-adminUpgrade nbdkit-plugin-python3Upgrade netcfUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curl-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-example-plugins | Apr 3, 2019 | Mar 19, 2019 |
| Debian | — | Upgrade libssh2 | Mar 27, 2019 | Mar 25, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Freebsd | — | Upgrade linux-c6-libssh2Upgrade linux-c7-libssh2Upgrade libssh2 | Jul 8, 2019 | Apr 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libssh2 | May 1, 2019 | Mar 25, 2019 |
| Oracle Solaris | — | Upgrade library/libssh2 to version 1.8.2-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade nbdkit-example-pluginsUpgrade libvirt-lock-sanlockUpgrade libvirt-nssUpgrade libguestfsUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-python3Upgrade libguestfs-gobject-develUpgrade libguestfs-winsupportUpgrade libiscsiUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libvirtUpgrade supermin-develUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade netcfUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade seabios-binUpgrade nbdkit-develUpgrade libvirt-dbusUpgrade libguestfs-inspect-iconsUpgrade libiscsi-utilsUpgrade qemu-imgUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade hivexUpgrade hivex-develUpgrade seabiosUpgrade qemu-kvm-block-glusterUpgrade qemu-guest-agentUpgrade libguestfs-gobjectUpgrade qemu-kvmUpgrade libvirt-daemon-driver-secretUpgrade libssh2-develUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-develUpgrade virt-dibUpgrade libvirt-clientUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-networkUpgrade libvirt-bash-completionUpgrade qemu-kvm-coreUpgrade virt-p2v-makerUpgrade nbdkit-plugin-python-commonUpgrade libvirt-adminUpgrade libguestfs-man-pages-ukUpgrade sgabios-binUpgrade seavgabios-binUpgrade perl-hivexUpgrade netcf-develUpgrade libguestfs-tools-cUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-sshUpgrade perl-Sys-VirtUpgrade qemu-kvm-commonUpgrade libvirt-develUpgrade libssh2-docsUpgrade libguestfs-rescueUpgrade nbdkit-plugin-vddkUpgrade libguestfs-javaUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-xzUpgrade nbdkitUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade libguestfs-toolsUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade ruby-hivexUpgrade libguestfs-develUpgrade virt-v2vUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2Upgrade libvirt-daemon-config-nwfilterUpgrade superminUpgrade libguestfs-bash-completionUpgrade nbdkit-bash-completionUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-xfsUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade sgabiosUpgrade libvirt-docsUpgrade libvirt-libsUpgrade libguestfs-javadocUpgrade libguestfs-rsync | Jul 3, 2019 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade netcf-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-debugsourceUpgrade seabiosUpgrade libvirt-daemonUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkitUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python3Upgrade nbdkit-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-adminUpgrade perl-Sys-VirtUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-java-develUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-debuginfoUpgrade nbdkit-example-pluginsUpgrade lua-guestfsUpgrade perl-Sys-Virt-debuginfoUpgrade virt-v2vUpgrade ruby-hivex-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-debuginfoUpgrade libiscsi-develUpgrade perl-hivexUpgrade libguestfs-rescueUpgrade netcf-develUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-gfs2Upgrade seavgabios-binUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-xzUpgrade virt-p2v-makerUpgrade libvirt-docsUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-nssUpgrade sgabiosUpgrade libvirt-daemon-driver-networkUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2-docsUpgrade python3-libguestfsUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade ruby-hivexUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivex-debugsourceUpgrade libvirtUpgrade libvirt-develUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade supermin-debugsourceUpgrade netcfUpgrade libvirt-daemon-config-networkUpgrade seabios-binUpgrade libssh2Upgrade libvirt-daemon-driver-qemuUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-xfsUpgrade supermin-develUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade sgabios-binUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-commonUpgrade python3-libvirt-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-man-pages-jaUpgrade nbdkit-debugsourceUpgrade libguestfs-winsupportUpgrade qemu-kvm-block-ssh-debuginfoUpgrade python3-hivex-debuginfoUpgrade libssh2-develUpgrade libguestfsUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-sshUpgrade libvirt-libs-debuginfoUpgrade netcf-libsUpgrade netcf-debugsourceUpgrade ruby-libguestfsUpgrade hivex-develUpgrade libguestfs-gobject-develUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsiUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade netcf-libs-debuginfoUpgrade libssh2-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-debugsourceUpgrade libguestfs-gobjectUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-debuginfoUpgrade libvirt-lock-sanlockUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libvirt-clientUpgrade qemu-kvmUpgrade virt-dib-debuginfoUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-guest-agentUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-debugsourceUpgrade SLOFUpgrade libvirt-dbusUpgrade libguestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libssh2-debugsourceUpgrade hivexUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade python3-libvirtUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-logical | Mar 29, 2019 | Mar 25, 2019 |
| Suse | — | suse-upgrade-libssh2-1suse-upgrade-libssh2-1-32bitsuse-upgrade-libssh2-1-x86suse-upgrade-libssh2-devel | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | ubuntu-pro-upgrade-libssh2-1 | Mar 22, 2023 | Mar 25, 2019 | |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub