CVE-2018-15473
Medium
Description
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Openbsd Openssh
PublishedAug 17, 2018
First seenAug 17, 2018
Weakness typeCWE-362Race condition
How to fix
Update
- siemens scalance_x204rna_firmware3.2.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd openssh | v ≤ 7.7 | — |
| debian debian_linux | 8.0, 9.0 | — |
| redhat enterprise_linux_desktop | 6.0, 7.0 | — |
| redhat enterprise_linux_server | 6.0, 7.0 | — |
| redhat enterprise_linux_workstation | 6.0, 7.0 | — |
| canonical ubuntu_linux | 14.04, 16.04, 18.04 | — |
| netapp cn1610_firmware | No range specified | — |
| netapp aff_baseboard_management_controller | No range specified | — |
| netapp cloud_backup | No range specified | — |
| netapp data_ontap_edge | No range specified | — |
| netapp fas_baseboard_management_controller | No range specified | — |
| netapp oncommand_unified_manager | 9.4 ≤ v | — |
| netapp ontap_select_deploy | No range specified | — |
| netapp service_processor | No range specified | — |
| netapp steelstore_cloud_integrated_storage | No range specified | — |
| netapp virtual_storage_console | 7.2 ≤ v | — |
| netapp clustered_data_ontap | No range specified | — |
| netapp data_ontap | No range specified | — |
| netapp vasa_provider | 7.2 ≤ v | — |
| netapp storage_replication_adapter | 7.2 ≤ v | — |
| oracle sun_zfs_storage_appliance_kit | 8.8.6 | — |
| siemens scalance_x204rna_firmware | v < 3.2.7 | 3.2.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.