{"id":"CVE-2018-10933","aliases":["ALPINE-CVE-2018-10933","BELL-CVE-2018-10933","DEBIAN-CVE-2018-10933","DLA-1548-1","DSA-4322-1","EUVD-2018-2986","GHSA-22gf-f5w4-hrfq","MGASA-2019-0043","RHBA-2018:3712","SUSE-SU-2018:3162-1","SUSE-SU-2018:3253-1","UBUNTU-CVE-2018-10933","USN-3795-1","openSUSE-SU-2024:10998-1"],"status":"published","title":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4....","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","severity":{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.91789,"percentile":0.99817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-287","CWE-592"],"published":"2018-10-16T00:00:00Z","modified":"2026-10-24T10:30:16Z","exploits":[{"source":"pocgithub","id":"SoledaD208/CVE-2018-10933","title":"SoledaD208/CVE-2018-10933","date":"2018-10-17","url":"https://github.com/SoledaD208/CVE-2018-10933"},{"source":"pocgithub","id":"blacknbunny/CVE-2018-10933","title":"blacknbunny/CVE-2018-10933","date":"2018-10-17","url":"https://github.com/blacknbunny/CVE-2018-10933"},{"source":"pocgithub","id":"hook-s3c/CVE-2018-10933","title":"hook-s3c/CVE-2018-10933","date":"2018-10-17","url":"https://github.com/hook-s3c/CVE-2018-10933"},{"source":"pocgithub","id":"jobroche/libssh-scanner","title":"jobroche/libssh-scanner","date":"2018-10-17","url":"https://github.com/jobroche/libssh-scanner"},{"source":"pocgithub","id":"kn6869610/CVE-2018-10933","title":"kn6869610/CVE-2018-10933","date":"2018-10-17","url":"https://github.com/kn6869610/CVE-2018-10933"},{"source":"exploitdb","id":"EDB-45638","title":"libSSH - Authentication Bypass","type":"remote","platform":"linux","date":"2018-10-18","url":"https://www.exploit-db.com/exploits/45638"},{"source":"pocgithub","id":"cve-2018/cve-2018-10933","title":"cve-2018/cve-2018-10933","date":"2018-10-18","url":"https://github.com/cve-2018/cve-2018-10933"},{"source":"pocgithub","id":"hackerhouse-opensource/cve-2018-10933","title":"hackerhouse-opensource/cve-2018-10933","date":"2018-10-18","url":"https://github.com/hackerhouse-opensource/cve-2018-10933"},{"source":"pocgithub","id":"likekabin/CVE-2018-10933-libSSH-Authentication-Bypass","title":"likekabin/CVE-2018-10933-libSSH-Authentication-Bypass","date":"2018-10-18","url":"https://github.com/likekabin/CVE-2018-10933-libSSH-Authentication-Bypass"},{"source":"pocgithub","id":"likekabin/CVE-2018-10933_ssh","title":"likekabin/CVE-2018-10933_ssh","date":"2018-10-18","url":"https://github.com/likekabin/CVE-2018-10933_ssh"},{"source":"pocgithub","id":"marco-lancini/hunt-for-cve-2018-10933","title":"marco-lancini/hunt-for-cve-2018-10933","date":"2018-10-18","url":"https://github.com/marco-lancini/hunt-for-cve-2018-10933"},{"source":"exploitdb","id":"EDB-46307","title":"LibSSH 0.7.6 / 0.8.4 - Unauthorized Access","type":"remote","platform":"linux","date":"2018-10-20","verified":true,"url":"https://www.exploit-db.com/exploits/46307"},{"source":"pocgithub","id":"Virgula0/POC-CVE-2018-10933","title":"Virgula0/POC-CVE-2018-10933","date":"2018-10-20","url":"https://github.com/Virgula0/POC-CVE-2018-10933"},{"source":"pocgithub","id":"jas502n/CVE-2018-10933","title":"jas502n/CVE-2018-10933","date":"2018-10-20","url":"https://github.com/jas502n/CVE-2018-10933"},{"source":"pocgithub","id":"ninp0/cve-2018-10933_poc","title":"ninp0/cve-2018-10933_poc","date":"2018-10-20","url":"https://github.com/ninp0/cve-2018-10933_poc"},{"source":"pocgithub","id":"pghook/CVE-2018-10933_Scanner","title":"pghook/CVE-2018-10933_Scanner","date":"2018-10-20","url":"https://github.com/pghook/CVE-2018-10933_Scanner"},{"source":"pocgithub","id":"shifa123/pythonprojects-CVE-2018-10933","title":"shifa123/pythonprojects-CVE-2018-10933","date":"2018-10-21","url":"https://github.com/shifa123/pythonprojects-CVE-2018-10933"},{"source":"pocgithub","id":"xFreed0m/CVE-2018-10933","title":"xFreed0m/CVE-2018-10933","date":"2018-10-21","url":"https://github.com/xFreed0m/CVE-2018-10933"},{"source":"pocgithub","id":"Bifrozt/CVE-2018-10933","title":"Bifrozt/CVE-2018-10933","date":"2018-10-23","url":"https://github.com/Bifrozt/CVE-2018-10933"},{"source":"pocgithub","id":"r3dxpl0it/CVE-2018-10933","title":"r3dxpl0it/CVE-2018-10933","date":"2018-10-23","url":"https://github.com/r3dxpl0it/CVE-2018-10933"},{"source":"pocgithub","id":"ivanacostarubio/libssh-scanner","title":"ivanacostarubio/libssh-scanner","date":"2018-10-24","url":"https://github.com/ivanacostarubio/libssh-scanner"},{"source":"pocgithub","id":"reanimat0r/bpnd-libssh","title":"reanimat0r/bpnd-libssh","date":"2018-10-24","url":"https://github.com/reanimat0r/bpnd-libssh"},{"source":"pocgithub","id":"throwawayaccount12312312/precompiled-CVE-2018-10933","title":"throwawayaccount12312312/precompiled-CVE-2018-10933","date":"2018-10-24","url":"https://github.com/throwawayaccount12312312/precompiled-CVE-2018-10933"},{"source":"pocgithub","id":"ensimag-security/CVE-2018-10933","title":"ensimag-security/CVE-2018-10933","date":"2018-10-25","url":"https://github.com/ensimag-security/CVE-2018-10933"},{"source":"pocgithub","id":"0xadaw/libSSH-bypass","title":"0xadaw/libSSH-bypass","date":"2018-11-16","url":"https://github.com/0xadaw/libSSH-bypass"},{"source":"pocgithub","id":"sambiyal/CVE-2018-10933-POC","title":"sambiyal/CVE-2018-10933-POC","date":"2018-11-21","url":"https://github.com/sambiyal/CVE-2018-10933-POC"},{"source":"pocgithub","id":"nikhil1232/LibSSH-Authentication-Bypass","title":"nikhil1232/LibSSH-Authentication-Bypass","date":"2018-12-19","url":"https://github.com/nikhil1232/LibSSH-Authentication-Bypass"},{"source":"metasploit","id":"auxiliary/scanner/ssh/libssh_auth_bypass","title":"libssh Authentication Bypass Scanner","type":"auxiliary","date":"2018-10-16","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ssh/libssh_auth_bypass"}],"exploits_more":14,"fixes":[{"ecosystem":"Alpine:v3.10","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libssh","fixed_in":["0.7.6-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libssh","fixed_in":["0.8.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libssh","fixed_in":["0.8.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libssh","fixed_in":["0.8.4-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libssh","fixed_in":["0.6.3-4+deb8u3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libssh","fixed_in":["0.7.3-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"libssh","fixed_in":["0.7.7-1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-dashboard","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-machines","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-packagekit","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-pcp","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-storaged","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"libssh","fixed_in":["0:0.7.1-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"libssh-debuginfo","fixed_in":["0:0.7.1-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-docker","fixed_in":["0:176-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"libssh-devel","fixed_in":["0:0.7.1-7.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libssh","fixed_in":["0.7.5-6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libssh","fixed_in":["0.6.3-12.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libssh","fixed_in":["0.6.3-12.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libssh","fixed_in":["0.6.3-12.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libssh","fixed_in":["0.6.1-0ubuntu3.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libssh","fixed_in":["0.6.3-4.3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libssh","fixed_in":["0.8.0~20170825.94fa1e38-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"fixed":"0.7.6-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-4+deb8u3"}]}],"versions":["0.6.3-4","0.6.3-4+deb8u1","0.6.3-4+deb8u2"]},{"source":"osv","ecosystem":"Debian:9","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.3-2+deb9u1"}]}],"versions":["0.7.3-2"]},{"source":"osv","ecosystem":"Mageia:6","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.7-1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-machines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-storaged","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"libssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"cockpit-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:176-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"libssh-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-7.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.5-6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-12.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-12.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-12.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-0ubuntu3.4"}]}],"versions":["0.5.4-1","0.6.1-0ubuntu2","0.6.1-0ubuntu3","0.6.1-0ubuntu3.1","0.6.1-0ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-4.3ubuntu0.1"}]}],"versions":["0.6.3-3ubuntu3","0.6.3-4.1","0.6.3-4.2","0.6.3-4.2ubuntu1","0.6.3-4.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0~20170825.94fa1e38-1ubuntu0.1"}]}],"versions":["0.7.5-1","0.8.0~20170825.94fa1e38-1","0.8.0~20170825.94fa1e38-1build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-0ubuntu3.4"}]}],"versions":["0.5.4-1","0.6.1-0ubuntu2","0.6.1-0ubuntu3","0.6.1-0ubuntu3.1","0.6.1-0ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3-4.3ubuntu0.1"}]}],"versions":["0.6.3-3ubuntu3","0.6.3-4.1","0.6.3-4.2","0.6.3-4.2ubuntu1","0.6.3-4.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0~20170825.94fa1e38-1ubuntu0.1"}]}],"versions":["0.7.5-1","0.8.0~20170825.94fa1e38-1","0.8.0~20170825.94fa1e38-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-1.2"}]}],"bundled":4}],"products":[{"vendor":"[unknown]","product":"libssh"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"libssh","product":"libssh"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"netapp","product":"storage_automation_store"},{"vendor":"oracle","product":"mysql_workbench"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://usn.ubuntu.com/3795-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://usn.ubuntu.com/3795-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4322","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.exploit-db.com/exploits/45638/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://www.libssh.org/security/advisories/CVE-2018-10933.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.securityfocus.com/bid/105677","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10933","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-22gf-f5w4-hrfq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-10933","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-10933","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10933","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0043.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23711","tags":["report"]},{"url":"https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/","tags":["web","report"]},{"url":"https://www.libssh.org/2018/10/29/libssh-0-8-5-and-libssh-0-7-7/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHBA-2018:3712","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637182","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3712.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10933","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183162-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1108020","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10933","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183253-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10933","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3795-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3795-2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3634","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-10933","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-17T12:00:00Z","modified":"2024-08-05T07:54:35.801Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-592"],"updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2986","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-17T12:00:00Z","modified":"2024-08-05T07:54:35Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T02:39:57.009215Z"}],"ghsa":[{"id":"GHSA-22gf-f5w4-hrfq","title":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4....","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2022-05-13T01:34:53Z","modified":"2023-02-01T05:08:47Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:50:51.621418Z"}],"nvd":[{"id":"CVE-2018-10933","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-17T12:29:00.65Z","modified":"2026-06-17T01:34:57.407Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-592","CWE-287"],"updated_at":"2026-11-02T14:04:46.409324Z"}],"osv":[{"id":"ALPINE-CVE-2018-10933","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-17T12:29:00.65Z","modified":"2026-10-23T17:17:55.202160047Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-10933","title":"CVE-2018-10933 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:11.923647Z","modified":"2026-01-26T09:47:24.222493Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-10933","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-17T12:29:00.65Z","modified":"2026-10-24T10:30:16.120254428Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10933","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-17T12:29:00.65Z","modified":"2026-10-23T18:03:18.197210535Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHBA-2018:3712","title":"Red Hat Bug Fix Advisory: cockpit bug fix update","status":"published","published":"2024-09-13T16:48:35Z","modified":"2026-07-01T10:03:16Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2018-10933","description":"A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.","status":"published","published":"2018-10-16T00:00:00Z","modified":"2026-04-22T11:41:31.122651Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"},{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1548-1","title":"libssh - security update","status":"published","published":"2018-10-18T00:00:00Z","modified":"2026-03-09T01:20:07.473384Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4322-1","title":"libssh - security update","status":"published","published":"2018-10-17T00:00:00Z","modified":"2026-03-09T02:10:40.643188Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0043","title":"Updated libssh packages fix security vulnerability","description":"libssh versions 0.6 and above have an authentication bypass\nvulnerability in the server code.  By presenting the server an\nSSH2_MSG_USERAUTH_SUCCESS message in place of the\nSSH2_MSG_USERAUTH_REQUEST message which the server would expect to\ninitiate authentication, the attacker could successfully authentciate\nwithout any credentials (CVE-2018-10933).\n","status":"published","published":"2019-01-20T00:02:33Z","modified":"2026-04-16T06:22:24.225494754Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10998-1","title":"libssh-config-0.9.6-1.2 on GA media","description":"These are all security issues fixed in the libssh-config-0.9.6-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:55:16.21137Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:3162-1","title":"Security update for libssh","description":"This update for libssh fixes the following issues:\n\n- CVE-2018-10933: Fixed a server mode authentication bypass (bsc#1108020).\n","status":"published","published":"2018-10-16T12:06:33Z","modified":"2026-02-04T02:20:59.819437Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3253-1","title":"Security update for libssh","description":"\nThis update for libssh fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10933: Fixed a server mode authentication bypass (bsc#1108020).\n\nNon security issue fixed:\n\n- Fix popd syntax to be compatible with newer versions of the bash shell.\n","status":"published","published":"2018-10-19T10:51:47Z","modified":"2026-02-04T04:19:20.335628Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-3795-1","title":"libssh vulnerability","description":"Peter Winter-Smith discovered that libssh incorrectly handled\nauthentication when being used as a server. A remote attacker could use\nthis issue to bypass authentication without any credentials.\n","status":"published","published":"2018-10-17T12:53:51Z","modified":"2026-04-22T09:51:05.80434Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}