{"id":"CVE-2020-22218","aliases":["AZL-28594","CLSA-2023-1695835334","CLSA-2023-1695835423","CLSA-2023-1695835793","DEBIAN-CVE-2020-22218","DLA-3559-1","EUVD-2020-14983","GHSA-4wvm-v4fc-prp5","JLSEC-2025-189","RHSA-2023:5615","SUSE-SU-2023:3555-1","SUSE-SU-2023:3738-1","UBUNTU-CVE-2020-22218","USN-6371-1"],"status":"published","title":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to...","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01155,"percentile":0.67277,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-08-22T00:00:00Z","modified":"2026-10-26T12:02:39Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libssh2","fixed_in":["1.9.0-3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1","fixed_in":["1.5.0-2ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1-dev","fixed_in":["1.5.0-2ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libssh2","fixed_in":["1.4.2-3.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libssh2-devel","fixed_in":["1.4.2-3.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libssh2-docs","fixed_in":["1.4.2-3.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libssh2","fixed_in":["1.4.2-3.0.1.el6_10.1.tuxcare.ol.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libssh2-devel","fixed_in":["1.4.2-3.0.1.el6_10.1.tuxcare.ol.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libssh2-docs","fixed_in":["1.4.2-3.0.1.el6_10.1.tuxcare.ol.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libssh2","fixed_in":["1.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libssh2","fixed_in":["1.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libssh2","fixed_in":["1.10.0-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibSSH2_jll","fixed_in":["1.11.0+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-debuginfo","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-devel","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-docs","fixed_in":["0:1.8.0-4.el7_9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libssh2_org","fixed_in":["1.9.0-150000.4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libssh2_org","fixed_in":["1.4.3-26.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libssh2_org","fixed_in":["1.4.3-26.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libssh2_org","fixed_in":["1.4.3-26.5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","fixed_in":["1.4.3-2ubuntu0.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","fixed_in":["1.5.0-2ubuntu0.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libssh2","fixed_in":["1.8.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libssh2","fixed_in":["1.8.0-2.1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libssh2-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.0.1.el6_10.1.tuxcare.ol.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.0.1.el6_10.1.tuxcare.ol.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-3.0.1.el6_10.1.tuxcare.ol.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1+deb10u1"}]}],"versions":["1.8.0-2.1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"LibSSH2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"1.10.1+0"},{"fixed":"1.11.0+0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libssh2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.el7_9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150000.4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-26.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-26.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libssh2_org","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-26.5.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2ubuntu0.2+esm3"}]}],"versions":["1.4.3-1","1.4.3-2","1.4.3-2ubuntu0.1","1.4.3-2ubuntu0.2","1.4.3-2ubuntu0.2+esm1","1.4.3-2ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+esm2"}]}],"versions":["1.5.0-2","1.5.0-2ubuntu0.1","1.5.0-2ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1ubuntu0.1"}]}],"versions":["1.8.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1ubuntu0.1"}]}],"versions":["1.8.0-2.1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2ubuntu0.2+esm3"}]}],"versions":["1.4.3-1","1.4.3-2","1.4.3-2ubuntu0.1","1.4.3-2ubuntu0.2","1.4.3-2ubuntu0.2+esm1","1.4.3-2ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu0.1+esm2"}]}],"versions":["1.5.0-2","1.5.0-2ubuntu0.1","1.5.0-2ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1ubuntu0.1"}]}],"versions":["1.8.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libssh2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-2.1ubuntu0.1"}]}],"versions":["1.8.0-2.1build1"]}],"products":[{"vendor":"libssh2","product":"libssh2"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/libssh2/libssh2/pull/476","tags":["x_transferred","Issue Tracking","Patch","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231006-0002/","tags":["x_transferred","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-22218","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231006-0002"},{"url":"https://github.com/advisories/GHSA-4wvm-v4fc-prp5"},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1695835334","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1695835423.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1695835793.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-22218","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5615","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235542","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5615.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-22218","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-22218","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233555-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214527","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-22218","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233738-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-22218","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6371-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-10-14T09:35:19.367Z","updated_at":"2026-11-02T14:35:46.873079Z"}],"euvd":[{"id":"EUVD-2020-14983","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-10-14T09:35:19Z","updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-4wvm-v4fc-prp5","title":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to...","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T21:30:25Z","modified":"2026-10-14T12:32:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T19:16:19.12Z","modified":"2026-10-14T10:17:32.317Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"AZL-28594","title":"CVE-2020-22218 affecting package libssh2 for versions less than 1.9.0-3","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T19:16:19Z","modified":"2026-04-21T04:25:53.112656Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T19:16:19.12Z","modified":"2026-10-20T10:52:13.521550971Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"DEBIAN-CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T19:16:19.12Z","modified":"2026-10-26T12:02:39.603577192Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2025-189","title":"An issue was discovered in function `_libssh2_packet_add` in libssh2 1.10.0 allows attackers to...","description":"An issue was discovered in function `_libssh2_packet_add` in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2025-10-27T15:45:54.694Z","modified":"2026-07-23T22:30:17.642780726Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"RHSA-2023:5615","title":"Red Hat Security Advisory: libssh2 security update","status":"published","published":"2024-09-16T13:52:16Z","modified":"2026-10-15T10:04:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"UBUNTU-CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-04-22T12:35:09.653112Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"CLSA-2023-1695835334","title":"Fix CVE(s): CVE-2020-22218","description":"\n   * SECURITY UPDATE: An issue was discovered in function\n     _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out\n     of bounds memory.\n     - debian/patches/CVE-2020-22218.patch: doing total_num zero length\n       check.\n     - CVE-2020-22218","status":"published","published":"2023-09-27T17:22:18Z","modified":"2026-06-04T10:04:25.897498Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1695835423","title":"libssh2: Fix of CVE-2020-22218","description":"- CVE-2020-22218: doing total_num zero length check","status":"published","published":"2023-09-27T17:23:47Z","modified":"2026-06-01T00:33:01.853450493Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1695835793","title":"libssh2: Fix of CVE-2020-22218","description":"- CVE-2020-22218: doing total_num zero length check","status":"published","published":"2023-09-27T17:29:57Z","modified":"2026-06-01T00:33:24.859933134Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DLA-3559-1","title":"libssh2 - security update","status":"published","published":"2023-09-08T00:00:00Z","modified":"2026-03-09T01:19:18.791703Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"SUSE-SU-2023:3555-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- CVE-2020-22218: Fixed a bug in _libssh2_packet_add() which allows to access out of bounds memory. (bsc#1214527)\n","status":"published","published":"2023-09-08T12:30:00Z","modified":"2026-02-04T03:02:28.10626Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3738-1","title":"Security update for libssh2_org","description":"This update for libssh2_org fixes the following issues:\n\n- CVE-2020-22218: Fixed a bug in _libssh2_packet_add() which allows to access out of bounds memory. (bsc#1214527)\n","status":"published","published":"2023-09-22T18:44:37Z","modified":"2026-02-04T03:43:21.543957Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6371-1","title":"libssh2 vulnerability","description":"It was discovered that libssh2 incorrectly handled memory\naccess. An attacker could possibly use this issue to cause\na crash.\n","status":"published","published":"2023-09-14T15:03:04Z","modified":"2026-06-29T13:50:56.934287022Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}