CVE-2016-20012

Published: Sep 15, 2021Modified: May 29, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

Affected (5)

Products: Openbsd: Openssh · Netapp: Clustered Data Ontap, Hci Management Node, Ontap Select Deploy Administration Utility, Solidfire

1 product

4 products

Clustered Data Ontap

Hci Management Node

Ontap Select Deploy Administration Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Up to 8.7

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Netapp Clustered Data Ontap	All versions
Netapp Hci Management Node	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Solidfire	All versions

Related CWEs

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (17)

https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/openssh/openssh-portable/pull/270

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/openssh/openssh-portable/pull/270#issuecomment-920577097

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/openssh/openssh-portable/pull/270#issuecomment-943909185

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://rushter.com/blog/public-ssh-keys/

Source: cve@mitre.org

ExploitThird Party Advisory

https://security.netapp.com/advisory/ntap-20211014-0005/

Source: cve@mitre.org

Third Party Advisory

https://utcc.utoronto.ca/~cks/space/blog/tech/SSHKeysAreInfoLeak

Source: cve@mitre.org

Third Party Advisory

https://www.openwall.com/lists/oss-security/2018/08/24/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/openssh/openssh-portable/pull/270

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/openssh/openssh-portable/pull/270#issuecomment-920577097

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://github.com/openssh/openssh-portable/pull/270#issuecomment-943909185

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://rushter.com/blog/public-ssh-keys/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://security.netapp.com/advisory/ntap-20211014-0005/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://utcc.utoronto.ca/~cks/space/blog/tech/SSHKeysAreInfoLeak

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.openwall.com/lists/oss-security/2018/08/24/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

Timeline

No history available yet.