CVE-2018-15473

Published: Aug 17, 2018Modified: Dec 17, 2025

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Affected (27)

Products: Openbsd: Openssh · Debian: Debian Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · +4 more

Show all products

1 product

1 product

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

1 product

13 products

Aff Baseboard Management Controller

Cloud Backup

Data Ontap

Data Ontap Edge

Fas Baseboard Management Controller

Oncommand Unified Manager

Ontap Select Deploy

Service Processor

Steelstore Cloud Integrated Storage

Virtual Storage Console

Vasa Provider

Storage Replication Adapter

Oracle

1 product

Sun Zfs Storage Appliance Kit

Siemens

1 product

Scalance X204rna Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Up to 7.7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Cn1610 Firmware	All versions

Running on/with	Platform Versions
Netapp Cn1610	All versions

Configuration F

10 vulnerable

Vulnerable Software	Affected Versions
Netapp Aff Baseboard Management Controller	All versions
Netapp Cloud Backup	All versions
Netapp Data Ontap	All versions
Netapp Data Ontap Edge	All versions
Netapp Fas Baseboard Management Controller	All versions
Netapp Oncommand Unified Manager	From 9.4
Netapp Ontap Select Deploy	All versions
Netapp Service Processor	All versions
Netapp Steelstore Cloud Integrated Storage	All versions
Netapp Virtual Storage Console	From 7.2

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Vasa Provider	From 7.2

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Storage Replication Adapter	From 7.2

Running on/with	Platform Versions
Netapp Clustered Data Ontap	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Sun Zfs Storage Appliance Kit	Version 8.8.6

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Scalance X204rna Firmware	Before 3.2.7

Running on/with	Platform Versions
Siemens Scalance X204rna	All versions

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (36)

http://www.openwall.com/lists/oss-security/2018/08/15/5

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/105140

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041487

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2019:0711

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2143

Source: cve@mitre.org

Third Party Advisory

https://bugs.debian.org/906236

Source: cve@mitre.org

Issue TrackingMailing ListPatchThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0

Source: cve@mitre.org

Patch

https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/201810-03

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20181101-0001/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3809-1/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2018/dsa-4280

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/45210/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45233/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45939/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.oracle.com/security-alerts/cpujan2020.html

Source: cve@mitre.org

PatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2018/08/15/5