OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssh< 1:7.7p1-4openssh_1:7.7p1-4_all.deb
Debian11allopenssh< 1:7.7p1-4openssh_1:7.7p1-4_all.deb
Debian10allopenssh< 1:7.7p1-4openssh_1:7.7p1-4_all.deb
Debian999allopenssh< 1:7.7p1-4openssh_1:7.7p1-4_all.deb
Debian13allopenssh< 1:7.7p1-4openssh_1:7.7p1-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssh	< 1:7.7p1-4	openssh_1:7.7p1-4_all.deb
Debian	11	all	openssh	< 1:7.7p1-4	openssh_1:7.7p1-4_all.deb
Debian	10	all	openssh	< 1:7.7p1-4	openssh_1:7.7p1-4_all.deb
Debian	999	all	openssh	< 1:7.7p1-4	openssh_1:7.7p1-4_all.deb
Debian	13	all	openssh	< 1:7.7p1-4	openssh_1:7.7p1-4_all.deb

ibm 20

f5 1

nessus 48

suse 4

veracode 1

openvas 28

citrix 1

metasploit 1

packetstorm 1

redhat 2

altlinux 2

oraclelinux 2

fedora 2

debian 4

centos 2

alpinelinux 2

canvas 1

zdt 2

aix 1

amazon 2

gentoo 1

exploitpack 2

mageia 1

osv 5

redhatcve 1

prion 2

cve 2

checkpoint_advisories 1

ubuntucve 2

exploitdb 2

cloudfoundry 2

debiancve 1

ubuntu 2

photon 4

symantec 1

ics 1

oracle 1

ibm

Security Bulletin: IBM QRadar Network Security is affected by an openssh vulnerability (CVE-2018-15473)

2019-10-07 07:18:34

Security Bulletin: A security vulnerability has been addressed in IBM Security Privileged Identity Manager

2020-03-03 07:53:00

Security Bulletin: OpenSSH as used by IBM QRadar SIEM is vulnerable to information exposure (CVE-2018-15473)

2020-01-09 15:46:24

K28942395 : OpenSSH vulnerability CVE-2018-15473

2018-09-28 00:00:00

nessus

EulerOS Virtualization 2.5.1 : openssh (EulerOS-SA-2018-1411)

2018-12-28 00:00:00

GLSA-201810-03 : OpenSSH: User enumeration vulnerability

2018-10-09 00:00:00

Debian DSA-4280-1 : openssh - security update

2018-08-23 00:00:00

suse

Security update for openssh (moderate)

2018-11-30 00:08:46

Security update for ssh-audit (moderate)

2021-10-18 00:00:00

Security update for ssh-audit (moderate)

2021-10-21 00:00:00

veracode

Information Disclosure

2019-05-16 03:38:57

openvas

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2019-1008)

2020-01-23 00:00:00

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2018-1413)

2020-01-23 00:00:00

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2018-1411)

2020-01-23 00:00:00

citrix

Citrix Hypervisor Security Update

2020-04-30 04:00:00

metasploit

SSH Username Enumeration

2014-11-11 20:59:41

packetstorm

OpenSSH User Enumeration

2018-12-05 00:00:00

redhat

(RHSA-2019:2143) Low: openssh security, bug fix, and enhancement update

2019-08-06 08:06:09

(RHSA-2019:0711) Low: openssh security update

2019-04-09 06:48:22

altlinux

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.2

2018-08-27 00:00:00

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.1

2018-08-24 00:00:00

oraclelinux

openssh security, bug fix, and enhancement update

2019-08-13 00:00:00

openssh security update

2019-04-10 00:00:00

fedora

[SECURITY] Fedora 27 Update: openssh-7.6p1-6.fc27

2018-09-13 17:06:58

[SECURITY] Fedora 28 Update: openssh-7.8p1-1.fc28

2018-08-30 04:59:02

debian

[SECURITY] [DSA 4280-1] openssh security update

2018-08-22 06:23:19

[SECURITY] [DLA-1474-1] openssh security update

2018-08-21 17:17:47

[SECURITY] [DSA 4280-1] openssh security update

2018-08-22 06:23:19

centos

openssh, pam_ssh_agent_auth security update

2019-04-12 13:56:07

openssh, pam_ssh_agent_auth security update

2019-08-30 03:49:22

alpinelinux

CVE-2018-15473

2018-08-17 19:29:00

CVE-2018-15599

2018-08-21 01:29:00

canvas

Immunity Canvas: SSH_ENUM

2018-08-17 19:29:00

zdt

OpenSSH 7.7 - Username Enumeration Exploit

2018-08-22 00:00:00

OpenSSH < 7.7 - User Enumeration Exploit (2)

2018-12-04 00:00:00

aix

Vulnerabilities in OpenSSH affect AIX.

2018-10-24 11:28:50

amazon

Low: openssh

2018-09-20 20:10:00

Low: openssh

2018-09-05 20:41:00

gentoo

OpenSSH: User enumeration vulnerability

2018-10-06 00:00:00

exploitpack

OpenSSH 2.3 7.7 - Username Enumeration

2018-08-21 00:00:00

OpenSSH 7.7 - User Enumeration (2)

2018-12-04 00:00:00

mageia

Updated openssh packages fix security vulnerability

2018-09-01 00:11:59

osv

openssh - security update

2018-08-22 00:00:00

CVE-2018-15473

2018-08-17 19:29:00

openssh - security update

2018-08-21 00:00:00

redhatcve

CVE-2018-15473

2018-08-20 01:49:24

prion

Design/Logic Flaw

2018-08-17 19:29:00

Design/Logic Flaw

2018-08-21 01:29:00

cve

CVE-2018-15473

2018-08-17 19:29:00

CVE-2018-15599

2018-08-21 01:29:00

checkpoint_advisories

OpenSSH sshd Username Information Disclosure (CVE-2018-15473)

2019-01-21 00:00:00

ubuntucve

CVE-2018-15473

2018-08-17 00:00:00

CVE-2018-15599

2018-08-21 00:00:00

exploitdb

OpenSSH < 7.7 - User Enumeration (2)

2018-12-04 00:00:00

OpenSSH 2.3 < 7.7 - Username Enumeration

2018-08-21 00:00:00

cloudfoundry

USN-3809-1: OpenSSH vulnerabilities | Cloud Foundry

2018-11-20 00:00:00

USN-3809-2: OpenSSH regression | Cloud Foundry

2021-09-07 00:00:00

debiancve

CVE-2018-15599

2018-08-21 01:29:00

ubuntu

OpenSSH vulnerabilities

2018-11-06 00:00:00

OpenSSH regression

2021-08-12 00:00:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0214

2019-03-06 00:00:00

Moderate Photon OS Security Update - PHSA-2019-0214

2019-03-06 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0126

2019-01-30 00:00:00

symantec

OpenSSH Vulnerabilities Jan-Aug 2018

2018-11-29 08:01:01

ics

Siemens SCALANCE X-200RNA Switch Devices

2022-12-19 12:00:00

oracle

Oracle Critical Patch Update Advisory - January 2020

2020-01-14 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.02 Low

EPSS

Percentile

88.5%

JSON

Related for DEBIANCVE:CVE-2018-15473