CVE-2018-15473

Fixed in a distro release EPSS 99%CVSS 5.9

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Published 2018-08-17 · CVE record · OSV

Products: openbsd openssh, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, canonical ubuntu_linux, netapp cn1610_firmware, netapp aff_baseboard_management_controller, netapp cloud_backup, netapp data_ontap_edge, netapp fas_baseboard_management_controller, netapp oncommand_unified_manager, netapp ontap_select_deploy, netapp service_processor, netapp steelstore_cloud_integrated_storage, netapp virtual_storage_console, netapp clustered_data_ontap, netapp data_ontap, netapp vasa_provider, netapp storage_replication_adapter, oracle sun_zfs_storage_appliance_kit, siemens scalance_x204rna_firmware

Distro releases