CVE-2018-10933
CRITICAL
9.1
CVSS Severity Score
Vulnerability Description
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
Affected Platforms (CPE)
📦
Libssh
Libssh
>= 0.6.0 and < 0.7.6📦
Libssh
Libssh
>= 0.8.0 and < 0.8.4💻
Canonical
Ubuntu Linux
= 14.04💻
Canonical
Ubuntu Linux
= 16.04💻
Canonical
Ubuntu Linux
= 18.04💻
Canonical
Ubuntu Linux
= 18.10💻
Debian
Debian Linux
= 8.0💻
Debian
Debian Linux
= 9.0💻
Redhat
Enterprise Linux
= 7.0📦
Netapp
Oncommand Unified Manager
>= 7.3📦
Netapp
Oncommand Unified Manager
>= 9.4📦
Netapp
Oncommand Workflow Automation
All versions📦
Netapp
Snapcenter
All versions📦
Netapp
Storage Automation Store
All versions📦
Oracle