CVE:CVE-2018-10933
CNNVD:CNNVD-201810-1020
libssh是一个用于访问SSH服务的C语言开发包，它能够执行远程命令、文件传输，同时为远程的程序提供安全的传输通道。server-side state machine是其中的一个服务器端状态机。
libssh的server-side state machine 0.7.6之前版本和0.8.4之前版本中存在安全漏洞。攻击者可借助恶意的客户端利用该漏洞在不进行身份验证的情况下创建通道，进而获取未授权的访问权限。
solution:Upgrade libssh libssh to a higher version than 0.7.6,0.8.4,and avoid the version [0.6.0,0.7.6),[0.8.0,0.8.4); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; netapp oncommand_unified_manager avoid the version [7.3,),[9.4,),no fixed version after 7.3,no fixed version after 9.4; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -; Upgrade oracle mysql_workbench to a higher version than 8.0.13,and avoid the version (,8.0.13]