Lucene search
Alpine Linux Development TeamALPINE:CVE-2018-15473HistoryAug 17, 2018 - 7:29 p.m.
CVE-2018-15473
2018-08-1719:29:00
Alpine Linux Development Team
security.alpinelinux.org
27
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.024 Low
EPSS
Percentile
89.9%
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.10-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.11-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.12-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.13-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.14-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.15-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.16-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.17-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
| Alpine | 3.18-main | noarch | openssh | < 7.7_p1-r4 | UNKNOWN |
Related
nessus
nessus
GLSA-201810-03 : OpenSSH: User enumeration vulnerability
2018-10-09 00:00:00
Debian DSA-4280-1 : openssh - security update
2018-08-23 00:00:00
Fedora 28 : openssh (2018-065a7722ee)
2019-01-03 00:00:00
redhat
redhat
(RHSA-2019:2143) Low: openssh security, bug fix, and enhancement update
2019-08-06 08:06:09
(RHSA-2019:0711) Low: openssh security update
2019-04-09 06:48:22
f5
f5
K28942395 : OpenSSH vulnerability CVE-2018-15473
2018-09-28 00:00:00
ibm
ibm
veracode
veracode
Information Disclosure
2019-05-16 03:38:57
citrix
citrix
Citrix Hypervisor Security Update
2020-04-30 04:00:00
suse
suse
Security update for openssh (moderate)
2018-11-30 00:08:46
Security update for ssh-audit (moderate)
2021-10-18 00:00:00
Security update for ssh-audit (moderate)
2021-10-21 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2019-1008)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2018-1413)
2020-01-23 00:00:00
openSUSE: Security Advisory for ssh-audit (openSUSE-SU-2021:1383-1)
2021-10-19 00:00:00
packetstorm
packetstorm
OpenSSH User Enumeration
2018-12-05 00:00:00
debiancve
debiancve
CVE-2018-15473
2018-08-17 19:29:00
CVE-2018-15599
2018-08-21 01:29:00
metasploit
metasploit
SSH Username Enumeration
2014-11-11 20:59:41
amazon
amazon
Low: openssh
2018-09-05 20:41:00
Low: openssh
2018-09-20 20:10:00
redhatcve
redhatcve
CVE-2018-15473
2018-08-20 01:49:24
osv
osv
CVE-2018-15473
2018-08-17 19:29:00
openssh - security update
2018-08-22 00:00:00
openssh - security update
2018-08-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.1
2018-08-24 00:00:00
Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2.M80P.2
2018-08-27 00:00:00
cve
cve
CVE-2018-15473
2018-08-17 19:29:00
CVE-2018-15599
2018-08-21 01:29:00
prion
prion
Design/Logic Flaw
2018-08-17 19:29:00
Design/Logic Flaw
2018-08-21 01:29:00
zdt
zdt
OpenSSH < 7.7 - User Enumeration Exploit (2)
2018-12-04 00:00:00
OpenSSH 7.7 - Username Enumeration Exploit
2018-08-22 00:00:00
nvd
nvd
CVE-2018-15473
2018-08-17 19:29:00
CVE-2018-15599
2018-08-21 01:29:00
oraclelinux
oraclelinux
openssh security, bug fix, and enhancement update
2019-08-13 00:00:00
openssh security update
2019-04-10 00:00:00
debian
debian
[SECURITY] [DSA 4280-1] openssh security update
2018-08-22 06:23:19
[SECURITY] [DLA-1474-1] openssh security update
2018-08-21 17:17:47
[SECURITY] [DSA 4280-1] openssh security update
2018-08-22 06:23:19
centos
centos
openssh, pam_ssh_agent_auth security update
2019-04-12 13:56:07
openssh, pam_ssh_agent_auth security update
2019-08-30 03:49:22
cvelist
cvelist
CVE-2018-15473
2018-08-17 00:00:00
CVE-2018-15599
2018-08-21 01:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: openssh-7.6p1-6.fc27
2018-09-13 17:06:58
[SECURITY] Fedora 28 Update: openssh-7.8p1-1.fc28
2018-08-30 04:59:02
canvas
canvas
Immunity Canvas: SSH_ENUM
2018-08-17 19:29:00
aix
aix
Vulnerabilities in OpenSSH affect AIX.
2018-10-24 11:28:50
gentoo
gentoo
OpenSSH: User enumeration vulnerability
2018-10-06 00:00:00
mageia
mageia
Updated openssh packages fix security vulnerability
2018-09-01 00:11:59
exploitpack
exploitpack
OpenSSH 2.3 7.7 - Username Enumeration
2018-08-21 00:00:00
OpenSSH 7.7 - User Enumeration (2)
2018-12-04 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSH sshd Username Information Disclosure (CVE-2018-15473)
2019-01-21 00:00:00
ubuntucve
ubuntucve
CVE-2018-15473
2018-08-17 00:00:00
CVE-2018-15599
2018-08-21 00:00:00
exploitdb
exploitdb
OpenSSH 2.3 < 7.7 - Username Enumeration
2018-08-21 00:00:00
OpenSSH < 7.7 - User Enumeration (2)
2018-12-04 00:00:00
photon
photon
cloudfoundry
cloudfoundry
USN-3809-2: OpenSSH regression | Cloud Foundry
2021-09-07 00:00:00
USN-3809-1: OpenSSH vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
ubuntu
ubuntu
OpenSSH vulnerabilities
2018-11-06 00:00:00
OpenSSH regression
2021-08-12 00:00:00
alpinelinux
alpinelinux
CVE-2018-15599
2018-08-21 01:29:00
symantec
symantec
OpenSSH Vulnerabilities Jan-Aug 2018
2018-11-29 08:01:01
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.024 Low
EPSS
Percentile
89.9%
Related for ALPINE:CVE-2018-15473