Skip to content
Sign in
9.1 Critical

CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4

Description

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Affected products and versions

Product Affected versions Fixed in
libssh 0.8.4 No fix stated
libssh 0.7.6 No fix stated
Track this CVE