CVE-2018-10933

Authentication Bypass in Server Code CVE-2018-10933 Versions 0.7.6 to 0.8.4 Description libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the...

bpnd-libssh

bpnd-libssh blueintel bpnd-libssh is a multi-threaded, remote scanner for CVE-2018-10933. Requirements python3 paramiko module Install Example: apt-get update apt-get install -y libffi-dev libssl-dev pip3 install paramiko Install with docker To build docker container: ./dockerbuild.sh To run dock...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

libssh-scanner

libssh scanner: CVE-2018-10933. It'll scan for vulnerable server for CVE-2018-10933 based on ssh's banner. This scanner is based on the work of Leap Security. USAGE libssh-scan...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130147 advisory. A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-pat...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130149 advisory. A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130108 advisory. A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130144 advisory. A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130152 advisory. A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130121 advisory. A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory...

Security Bulletin:A vulnerability in libssh affects IBM SAN Volume Controller, IBM Storage Virtualize and IBM FlashSystem products

Summary A vulnerability in libssh affects IBM Storage Virtualize products and could result in a confidentiality impact. CVE-2025-5318. Vulnerability Details CVEID:CVE-2025-5318 DESCRIPTION: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered...

Security Bulletin: Vulnerabilities in the kernel and libssh affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in libssh and the kernel affect IBM Storage Virtualize products and could cause denial of service and privilege escalation impacts. CVE-2025-5987 CVE-2025-39966 CVE-2025-40176 Vulnerability Details CVEID:CVE-2025-5987 DESCRIPTION: A flaw was found in libssh when using the...

hunt-for-cve-2018-10933

Hunt for and Exploit the libSSH Authentication Bypass CVE-2018-10933 Practical Guide explaining how to find hosts vulnerable to the libSSH Authentication Bypass CVE-2018-10933 and how to exploit them to gain shell access. Please refer to the following blog post for instructions:...

cve-2018-10933

CVE-2018-10933 libssh authentication bypass, vulnerable Docker container on port 2222 for exploitation...

Libssh-server-CVE-2018-10933

libssh Authentication Bypass VulnerabilityCVE-2018-10933 中文版本Chinese version libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. A logic vulnerability was found in libssh's server-side state machine. The attacker can send the MSGUSERAUTHSUCCESS message...

CVE-2018-10933_Scanner

CVE-2018-10933Scanner is a tool to detect libssh versions vulnerable to CVE-2018-10933. It allows scanning from a single target to a full list of IP addresses, and also shows the location of the vulnerable server. + Contact: x Facebook: http://fb.me/IDX4CKS x Twitter: @IDX4CKS x Email:...

libSSH-bypass

libSSH-bypass Implementation of CVE-2018-10933 // but with a CIDR block scanner. Didn't feel like spending $$ on Shodan's API, so i've added a range scanner that dumps vuln servers into a file with a soft scan. you'll need to pip install paramiko as a dependency. this is an early PoC version, I'l...

Libssh-server-CVE-2018-10933

Libssh-server-CVE-2018-10933...

UBUNTU-CVE-2026-107675

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libssh vulnerabilities (USN-8699-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8699-1 advisory. It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long...