CVE-2018-15919

No fix known EPSS 4%CVSS 5.3

Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'

Published 2018-08-28 · CVE record · OSV

Products: openbsd openssh, netapp cloud_backup, netapp data_ontap_edge, netapp ontap_select_deploy, netapp steelstore, netapp cn1610_firmware

Distro releases