CVE-2018-10933
published 2018-10-17CVE-2018-10933: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first…
critical9.1CVSS 3.0
AVNACLPRNUINSUCHIHAN
EXPLOIT
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | libssh | < libssh 0.8.4-1 (bookworm) | libssh 0.8.4-1 (bookworm) |
| libssh | libssh | >= 0 < 0.8.4-1 | 0.8.4-1 |
| libssh | libssh | >= 0 < 0.8.4-1 | 0.8.4-1 |
| libssh | libssh | >= 0 < 0.8.4-1 | 0.8.4-1 |
| libssh | libssh | >= 0 < 0.8.4-1 | 0.8.4-1 |
| libssh | libssh | >= 0.6.0 < 0.7.6 | 0.7.6 |
| libssh | libssh | >= 0.8.0 < 0.8.4 | 0.8.4 |
| netapp | oncommand_unified_manager | >= 7.3 | — |
| netapp | oncommand_unified_manager | >= 9.4 | — |
| oracle | mysql_workbench | <= 8.0.13 | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL