# CVE-2018-10933

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

- Page: https://www.vulneraibility.com/cve/CVE-2018-10933
- CVSS: 9.1
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 91.79% (percentile 99.8)
- Public exploit code: 2 on Exploit-DB · 1 Metasploit module · 39 GitHub proofs of concept (first 2018-10-17)
- Weakness: CWE-592
- Published: 2018-10-17

## Affected versions

- [UNKNOWN] libssh: affected 0.7.6; 0.8.4

A version outside these ranges is not a statement that it is unaffected.

## References

- [advisory] https://usn.ubuntu.com/3795-1/
- [other] https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- [advisory] https://usn.ubuntu.com/3795-2/
- [advisory] https://www.debian.org/security/2018/dsa-4322
- [exploit] https://www.exploit-db.com/exploits/45638/
- [other] https://www.libssh.org/security/advisories/CVE-2018-10933.txt
- [other] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933
- [other] http://www.securityfocus.com/bid/105677
- [other] https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html
- [other] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016
- [other] https://security.netapp.com/advisory/ntap-20190118-0002/

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.