CVE-2018-15473

Scores

EPSS

0.904high90.4%
0%20%40%60%80%100%

Percentile: 90.4%

CVSS

5.3medium3.x
0246810

CVSS Score: 5.3/10

All CVSS Scores

CVSS 3.x
5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS 2.0
5.0

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

astradebiannvdredhatubuntu

CWEs

CWE-200CWE-362

Related Vulnerabilities

Exploits

Exploit ID: 45210

Source: exploitdb

URL: https://www.exploit-db.com/exploits/45210

Exploit ID: 45233

Source: exploitdb

URL: https://www.exploit-db.com/exploits/45233

Exploit ID: 45939

Source: exploitdb

URL: https://www.exploit-db.com/exploits/45939

Exploit ID: CVE-2018-15473

Source: github-poc

URL: https://github.com/kaktus5454/CVE-2018-15473

Recommendations

Source: nvd

All OpenSSH users should upgrade to the latest version:
# emerge –sync
# emerge –ask –oneshot –verbose “>=net-misc/openssh-7.7_p1-r8”

URL: https://security.gentoo.org/glsa/201810-03

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing this update, the OpenSSH server daemon (sshd) will be restarted automatically.

URL: https://access.redhat.com/errata/RHSA-2019:2143

Source: nvd

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing this update, the OpenSSH server daemon (sshd) will be restarted automatically.

URL: https://access.redhat.com/errata/RHSA-2019:0711

Vulnerable Software (49)

Type: Configuration

Product: openssh

Operating System: debian

Trait:
{  "fixed": "1:7.7p1-4"}

Source: debian

Type: Configuration

Product: openssh

Operating System: ubuntu bionic 18.04

Trait:
{  "fixed": "1:7.6p1-4ubuntu0.1"}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu cosmic 18.10

Trait:
{  "fixed": "1:7.7p1-4"}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu disco 19.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu eoan 19.10

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu focal 20.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu groovy 20.10

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu hirsute 21.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu trusty 14.04

Trait:
{  "fixed": "1:6.6p1-2ubuntu2.11"}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: ubuntu xenial 16.04

Trait:
{  "fixed": "1:7.2p2-4ubuntu2.6"}

Source: ubuntu

Type: Configuration

Product: openssh

Operating System: astra 1.6.1

Trait:
{  "unaffected": true}

Source: astra

Type: Configuration

Product: openssh

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat

Type: Configuration

Product: openssh

Operating System: rhel 6

Trait:
{  "fixed": "5.3p1-124.el6_10"}

Source: redhat

Type: Configuration

Product: openssh

Operating System: rhel 7

Trait:
{  "fixed": "7.4p1-21.el7"}

Source: redhat

Type: Configuration

Product: openssh-askpass-common

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat

Type: Configuration

Product: openssh-clients

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat

Type: Configuration

Product: openssh-common

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat

Type: Configuration

Product: openssh-keysign

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat

Type: Configuration

Product: openssh-server

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat

Type: Configuration

Product: openssh-server-control

Operating System: altlinux

Trait:
{  "fixed": "0:7.2p2-alt3"}

Source: redhat