MGASA-2019-0043
- Source
- https://advisories.mageia.org/MGASA-2019-0043.html
- Import Source
- https://advisories.mageia.org/MGASA-2019-0043.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2019-0043
- Upstream
- Published
- 2019-01-20T00:02:33Z
- Modified
- 2026-04-16T06:22:24Z
- Summary
- Updated libssh packages fix security vulnerability
- Details
-
libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2_MSG_USERAUTH_SUCCESS message in place of the SSH2_MSG_USERAUTH_REQUEST message which the server would expect to initiate authentication, the attacker could successfully authentciate without any credentials (CVE-2018-10933).
- References
-
- https://advisories.mageia.org/MGASA-2019-0043.html
- https://bugs.mageia.org/show_bug.cgi?id=23711
- https://www.libssh.org/security/advisories/CVE-2018-10933.txt
- https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/
- https://www.libssh.org/2018/10/29/libssh-0-8-5-and-libssh-0-7-7/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:6 / libssh
Package
- Name
- libssh
- Purl
- pkg:rpm/mageia/libssh?arch=source&distro=mageia-6