libssh Authentication Bypass Vulnerability
libssh have a disclosed a vulnerability in their secure shell (SSH) library. A remote attacker could exploit this vulnerability to gain access to an affected device without authentication.
This content has been archived
This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk
Summary
libssh have a disclosed a vulnerability in their secure shell (SSH) library. A remote attacker could exploit this vulnerability to gain access to an affected device without authentication.
Threat details
When presenting an affected server with an SSH2_MSG_USERAUTH_SUCCESS message instead of an SSH2_MSG_USERAUTH_REQUEST message during initial authentication, the server will authenticate the requesting user without requiring valid credentials.
For further information:
Threat updates
| Date | Update |
|---|---|
| 24 Oct 2018 |
There are now several publicly available scanners and exploits for this vulnerability. As a result, there is likely to be an increase in attacks using these exploits in the near future. |
Remediation steps
| Type | Step |
|---|---|
|
Users and organisations are encouraged to review the libssh 0.8.4 and 0.7.6 Security & Bugfix Release and apply the necessary updates. |
CVE Vulnerabilities
Last edited: 17 February 2020 12:47 pm