CVE-2018-15473 EXPLOIT
5.3
MEDIUM · CVSS 3.1 · EPSS 98.6% (pctl 100)
Patch early
A public exploit exists.
Description
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Scoring
| CVSS | 5.3 (MEDIUM, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| EPSS | 98.63% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-362 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2018-08-17 |
| Last modified | 2026-06-17 |
Affected (24)
| Vendor | Product |
|---|---|
| canonical | ubuntu linux |
| debian | debian linux |
| netapp | aff baseboard management controller |
| netapp | cloud backup |
| netapp | clustered data ontap |
| netapp | cn1610 |
| netapp | cn1610 firmware |
| netapp | data ontap |
| netapp | data ontap edge |
| netapp | fas baseboard management controller |
| netapp | oncommand unified manager |
| netapp | ontap select deploy |
| netapp | service processor |
| netapp | steelstore cloud integrated storage |
| netapp | storage replication adapter |
| netapp | vasa provider |
| netapp | virtual storage console |
| openbsd | openssh |
| oracle | sun zfs storage appliance kit |
| redhat | enterprise linux desktop |
| redhat | enterprise linux server |
| redhat | enterprise linux workstation |
| siemens | scalance x204rna |
| siemens | scalance x204rna firmware |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | OpenSSH < 7.7 - User Enumeration (2) | 2018-12-04 |
| exploit-db | OpenSSH 2.3 < 7.7 - Username Enumeration | 2018-08-21 |
| exploit-db | OpenSSH 2.3 < 7.7 - Username Enumeration (PoC) | 2018-08-16 |
References
- http://www.openwall.com/lists/oss-security/2018/08/15/5
- http://www.securityfocus.com/bid/105140
- http://www.securitytracker.com/id/1041487
- https://access.redhat.com/errata/RHSA-2019:0711
- https://access.redhat.com/errata/RHSA-2019:2143
- https://bugs.debian.org/906236
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
- https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011
- https://security.gentoo.org/glsa/201810-03
- https://security.netapp.com/advisory/ntap-20181101-0001/
- https://usn.ubuntu.com/3809-1/
- https://www.debian.org/security/2018/dsa-4280
- https://www.exploit-db.com/exploits/45210/
- https://www.exploit-db.com/exploits/45233/
- https://www.exploit-db.com/exploits/45939/
- https://www.oracle.com/security-alerts/cpujan2020.html
- http://www.openwall.com/lists/oss-security/2018/08/15/5
- http://www.securityfocus.com/bid/105140
→ the Explorer · watch your stack · NVD