CVE-2018-10933 PUBLISHED

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

EPSS 78.63% · 99.0th percentile

Risk Scores

EPSS Score
78.63%
99.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibssh0, 0.6.3-4.3, 0.6.3-4.2ubuntu1
Ubuntu:18.04:LTSlibssh0.8.0~20170825.94fa1e38-1build1, 0, 0.7.5-1
Ubuntu:14.04:LTSlibssh0.6.1-0ubuntu2, 0.5.4-1, 0

Timeline

References

Open in Interactive Console →