A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is …

{
                    "product": "libssh2",
                    "vendor": "The libssh2 Project",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "1.8.1"
                        }
                    ]
                }