CVE-2018-10933: canonical ubuntu_linux DEPRECATED: Authentication Bypass Issues
Vulnerability summary
CVE-2018-10933 is a critical (CVSS 9.1) DEPRECATED: Authentication Bypass Issues vulnerability in canonical ubuntu_linux. EPSS estimates a 91.79% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 17-10-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
CVSS metrics
7 scores · 6 sources · 2 versions- NVDNIST9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · AlpineEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · Red hatEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
91.79%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 91.79% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundlibSSH - Authentication Bypass
Maturity: poc
LibSSH 0.7.6 / 0.8.4 - Unauthorized Access
Maturity: weaponized
libssh Authentication Bypass Scanner
auxiliary/scanner/ssh/libssh_auth_bypass
Maturity: poc
Weaknesses
CWE · root cause- CWE-592DEPRECATED: Authentication Bypass IssuesThis weakness has been deprecated because it covered redundant concepts already described in CWE-287.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Redhat11 products
- enterprise_linuxEOL7.0
- cockpit< 0:176-4.el7
- cockpit-dashboard< 0:176-4.el7
- cockpit-docker< 0:176-4.el7
- cockpit-machines< 0:176-4.el7
Netapp4 products
- oncommand_unified_manager≥ 7.3 (No fix recorded) | ≥ 9.4 (No fix recorded)
- oncommand_workflow_automationna
- snapcenterna
- storage_automation_storena
Suse4 products
- libssh&distro=SUSE Linux Enterprise Desktop 12 SP3< 0.6.3-12.6.1
- libssh&distro=SUSE Linux Enterprise Module for Basesystem 15< 0.7.5-6.3.1
- libssh&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 0.6.3-12.6.1
- libssh&distro=SUSE Linux Enterprise Workstation Extension 12 SP3< 0.6.3-12.6.1
Debian2 products
- libssh< 0.8.4-1 | < 0.7.3-2+deb9u1 | < 0.6.3-4+deb8u3
- debian_linuxEOL8.0 | 9.0
[unknown]1 product
- libssh0.7.6 | 0.8.4
Alpine1 product
- libssh≥ 0.6.0, < 0.7.6-r0
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 18.10
Libssh1 product
- libssh≥ 0.6.0, < 0.7.6 | ≥ 0.8.0, < 0.8.4
Mageia1 product
- libssh< 0.7.7-1.mga6
Oracle1 product
- mysql_workbench≤ 8.0.13
Ubuntu1 product
- libssh< 0.6.1-0ubuntu3.4 | < 0.6.3-4.3ubuntu0.1 | < 0.8.0~20170825.94fa1e38-1ubuntu0.1
11 vendors · 28 products
References
32 links- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlX Refsource CONFIRMPatchThird Party Advisory
- www.libssh.org/security/advisories/CVE-2018-10933.txtX Refsource CONFIRMVendor AdvisoryAdvisoryARTICLE
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933X Refsource CONFIRMIssue TrackingThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/10/msg00010.htmlMailing ListX Refsource MLISTThird Party Advisory
