Lucene search
UbuntuUSN-3809-2HistoryAug 12, 2021 - 12:00 a.m.
OpenSSH regression
2021-08-1200:00:00
ubuntu.com
210
Releases
- Ubuntu 18.04 ESM
Packages
- openssh - secure shell (SSH) for secure access to remote machines
Details
USN-3809-1 fixed vulnerabilities in OpenSSH. The update for CVE-2018-15473
was incomplete and could introduce a regression in certain environments.
This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Robert Swiecki discovered that OpenSSH incorrectly handled certain messages.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2016-10708)
It was discovered that OpenSSH incorrectly handled certain requests.
An attacker could possibly use this issue to access sensitive information.
(CVE-2018-15473)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | openssh-server | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-client | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-client-dbgsym | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-client-udeb | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-server-dbgsym | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-server-udeb | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-sftp-server | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssh-sftp-server-dbgsym | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | ssh | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
| Ubuntu | 18.04 | noarch | ssh-askpass-gnome | < 1:7.6p1-4ubuntu0.5 | UNKNOWN |
References
Related
cloudfoundry
cloudfoundry
USN-3809-2: OpenSSH regression | Cloud Foundry
2021-09-07 00:00:00
USN-3809-1: OpenSSH vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
ubuntu
ubuntu
OpenSSH vulnerabilities
2018-11-06 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3809-1)
2018-11-07 00:00:00
Ubuntu: Security Advisory (USN-3809-2)
2021-08-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2530-2)
2021-04-19 00:00:00
osv
osv
openssh regression
2021-08-12 11:59:35
openssh - security update
2018-01-26 00:00:00
CVE-2016-10708
2018-01-21 22:29:00
nessus
nessus
SUSE SLES12 Security Update : openssh (SUSE-SU-2018:2530-2)
2018-10-22 00:00:00
SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2018:1989-1)
2018-07-20 00:00:00
symantec
symantec
OpenSSH Vulnerabilities Jan-Aug 2018
2018-11-29 08:01:01
ubuntucve
ubuntucve
debian
debian
[SECURITY] [DLA 1257-1] openssh security update
2018-01-26 21:13:31
[SECURITY] [DSA 4280-1] openssh security update
2018-08-22 06:23:40
[SECURITY] [DSA 4280-1] openssh security update
2018-08-22 06:23:19
ibm
ibm
Security Bulletin: Vulnerability in OpenSSH affects QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for IBM BladeCenter
2018-09-12 17:36:21
cve
cve
suse
suse
Security update for openssh (moderate)
2018-07-28 16:03:16
Security update for ssh-audit (moderate)
2021-10-18 00:00:00
Security update for openssh (moderate)
2018-11-30 00:08:46
debiancve
debiancve
cvelist
cvelist
redhatcve
redhatcve
CVE-2016-10708
2019-10-10 04:49:30
CVE-2018-15473
2018-08-20 01:49:24
f5
f5
OpenSSH vulnerability CVE-2016-10708
2018-04-11 22:06:00
K28942395 : OpenSSH vulnerability CVE-2018-15473
2018-09-28 00:00:00
prion
prion
Null pointer dereference
2018-01-21 22:29:00
Design/Logic Flaw
2018-08-17 19:29:00
Design/Logic Flaw
2018-08-21 01:29:00
veracode
veracode
Information Disclosure
2019-05-16 03:38:57
citrix
citrix
Citrix Hypervisor Security Update
2020-04-30 04:00:00
packetstorm
packetstorm
OpenSSH User Enumeration
2018-12-05 00:00:00
metasploit
metasploit
SSH Username Enumeration
2014-11-11 20:59:41
redhat
redhat
(RHSA-2019:2143) Low: openssh security, bug fix, and enhancement update
2019-08-06 08:06:09
(RHSA-2019:0711) Low: openssh security update
2019-04-09 06:48:22
exploitpack
exploitpack
OpenSSH 2.3 7.7 - Username Enumeration
2018-08-21 00:00:00
OpenSSH 7.7 - User Enumeration (2)
2018-12-04 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: openssh-7.8p1-1.fc28
2018-08-30 04:59:02
[SECURITY] Fedora 27 Update: openssh-7.6p1-6.fc27
2018-09-13 17:06:58
gentoo
gentoo
OpenSSH: User enumeration vulnerability
2018-10-06 00:00:00
aix
aix
Vulnerabilities in OpenSSH affect AIX.
2018-10-24 11:28:50
mageia
mageia
Updated openssh packages fix security vulnerability
2018-09-01 00:11:59
amazon
amazon
Low: openssh
2018-09-20 20:10:00
Low: openssh
2018-09-05 20:41:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.1
2018-08-24 00:00:00
Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.2
2018-08-27 00:00:00
zdt
zdt
OpenSSH < 7.7 - User Enumeration Exploit (2)
2018-12-04 00:00:00
OpenSSH 7.7 - Username Enumeration Exploit
2018-08-22 00:00:00
oraclelinux
oraclelinux
openssh security, bug fix, and enhancement update
2019-08-13 00:00:00
openssh security update
2019-04-10 00:00:00
alpinelinux
alpinelinux
CVE-2018-15473
2018-08-17 19:29:00
CVE-2018-15599
2018-08-21 01:29:00
centos
centos
openssh, pam_ssh_agent_auth security update
2019-04-12 13:56:07
openssh, pam_ssh_agent_auth security update
2019-08-30 03:49:22
openssh, pam_ssh_agent_auth security update
2017-08-24 01:40:16
canvas
canvas
Immunity Canvas: SSH_ENUM
2018-08-17 19:29:00
checkpoint_advisories
checkpoint_advisories
OpenSSH sshd Username Information Disclosure (CVE-2018-15473)
2019-01-21 00:00:00
exploitdb
exploitdb
OpenSSH < 7.7 - User Enumeration (2)
2018-12-04 00:00:00
OpenSSH 2.3 < 7.7 - Username Enumeration
2018-08-21 00:00:00
cloudlinux
cloudlinux
Fixed CVEs in openssh-5.3p1: CVE-2016-10708, CVE-2016-10012
2022-07-11 17:47:12
photon
photon