CVE-2018-15473
medium · 5.3OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
5.3
CVSS
98.6%
EPSS (exploit prob.)
100th
EPSS percentile
2018-08-17
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-362
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| openbsd | openssh | <= 7.7 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| netapp | cn1610_firmware | all versions |
| netapp | cn1610 | all versions |
| netapp | aff_baseboard_management_controller | all versions |
| netapp | cloud_backup | all versions |
| netapp | data_ontap_edge | all versions |
| netapp | fas_baseboard_management_controller | all versions |
| netapp | oncommand_unified_manager | >= 9.4 |
| netapp | ontap_select_deploy | all versions |
| netapp | service_processor | all versions |
| netapp | steelstore_cloud_integrated_storage | all versions |
| netapp | virtual_storage_console | >= 7.2 |
| netapp | clustered_data_ontap | all versions |
| netapp | data_ontap | all versions |
| netapp | vasa_provider | >= 7.2 |
| netapp | clustered_data_ontap | all versions |
| netapp | storage_replication_adapter | >= 7.2 |
| netapp | clustered_data_ontap | all versions |
| oracle | sun_zfs_storage_appliance_kit | 8.8.6 |
| siemens | scalance_x204rna_firmware | < 3.2.7 |
| siemens | scalance_x204rna | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.openwall.com/lists/oss-security/2018/08/15/5
- http://www.securityfocus.com/bid/105140
- http://www.securitytracker.com/id/1041487
- https://access.redhat.com/errata/RHSA-2019:0711
- https://access.redhat.com/errata/RHSA-2019:2143
- https://bugs.debian.org/906236
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
- https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011
- https://security.gentoo.org/glsa/201810-03
- https://security.netapp.com/advisory/ntap-20181101-0001/
- https://usn.ubuntu.com/3809-1/
- https://www.debian.org/security/2018/dsa-4280
- https://www.exploit-db.com/exploits/45210/
- https://www.exploit-db.com/exploits/45233/
- https://www.exploit-db.com/exploits/45939/
- https://www.oracle.com/security-alerts/cpujan2020.html
- http://www.openwall.com/lists/oss-security/2018/08/15/5
- http://www.securityfocus.com/bid/105140
- http://www.securitytracker.com/id/1041487
- https://access.redhat.com/errata/RHSA-2019:0711
- https://access.redhat.com/errata/RHSA-2019:2143
- https://bugs.debian.org/906236
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-15473