What’s Vulnerable › Vulnerabilities

CVE-2018-10933

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 91.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-10-17 · updated 2026-06-17
• Weakness: CWE-592

Description

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10
• Debian Linux: 8.0, 9.0
• libssh: from 0.6.0 before 0.7.6; from 0.8.0 before 0.8.4 — fixed in 0.7.6, 0.8.4
• NetApp OnCommand Unified Manager for 7-Mode (core package): from 7.3; from 9.4
• NetApp OnCommand Workflow Automation: all versions
• NetApp SnapCenter: all versions
• NetApp Storage Automation Store: all versions
• Oracle Corporation MySQL Workbench: through 8.0.13
• Red Hat Enterprise Linux: 7.0

How to fix

Upgrade to a fixed version: libssh 0.7.6, 0.8.4. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/105677
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933
• https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016
• https://security.netapp.com/advisory/ntap-20190118-0002/
• https://usn.ubuntu.com/3795-1/
• https://usn.ubuntu.com/3795-2/
• https://www.debian.org/security/2018/dsa-4322
• https://www.exploit-db.com/exploits/45638/
• https://www.libssh.org/security/advisories/CVE-2018-10933.txt
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• http://www.securityfocus.com/bid/105677

Get alerted when CVE-2018-10933 or the next vulnerability affects your stack