CVE-2018-10933

critical-risk
Published 2018-10-17

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Do I need to act?

!
78.3% chance of exploitation in next 30 days
EPSS score — higher than 22% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
2 public exploits available
45638, 46307
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (14)

Affected Vendors

Debian Redhat Oracle Canonical Netapp Libssh

References (22)

Third Party Advisory http://www.securityfocus.com/bid/105677
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933
Mailing List https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html
Third Party Advisory https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016
Third Party Advisory https://security.netapp.com/advisory/ntap-20190118-0002/
Third Party Advisory https://usn.ubuntu.com/3795-1/
Third Party Advisory https://usn.ubuntu.com/3795-2/
Third Party Advisory https://www.debian.org/security/2018/dsa-4322
Exploit https://www.exploit-db.com/exploits/45638/
Vendor Advisory https://www.libssh.org/security/advisories/CVE-2018-10933.txt
Patch https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
Third Party Advisory http://www.securityfocus.com/bid/105677
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933
Mailing List https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html
Third Party Advisory https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016
Third Party Advisory https://security.netapp.com/advisory/ntap-20190118-0002/
Third Party Advisory https://usn.ubuntu.com/3795-1/
Third Party Advisory https://usn.ubuntu.com/3795-2/
Third Party Advisory https://www.debian.org/security/2018/dsa-4322
Exploit https://www.exploit-db.com/exploits/45638/
and 2 more references
76
/ 100
critical-risk
Severity 31/34 · Critical
Exploitability 27/34 · High
Exposure 18/34 · Moderate