NetSight
IP …
critical9.1Public exploit code

CVE-2018-10933

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Affected products

VendorProductAffected versions
LibsshLibssh
from 0.6.0 before 0.7.6
from 0.8.0 before 0.8.4
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
DebianDebian Linux
Versions 8.0, 9.0
RedhatEnterprise Linux
Version 7.0
NetappOncommand Unified Manager
from 7.3
from 9.4
NetappOncommand Workflow Automation
All versions
NetappSnapcenter
All versions
NetappStorage Automation Store
All versions
OracleMysql Workbench
through 8.0.13

Weakness classification

CWE-592CWE-287

References