CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15473

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.905

EPSS Ranking 99.6%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-15473

Netapp » Aff Baseboard Management Controller » Version: N/A

cpe:2.3:a:netapp:aff_baseboard_management_controller:-
Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Data Ontap Edge » Version: N/A

cpe:2.3:a:netapp:data_ontap_edge:-
Netapp » Fas Baseboard Management Controller » Version: N/A

cpe:2.3:a:netapp:fas_baseboard_management_controller:-
Netapp » Oncommand Unified Manager » Version: 9.4

cpe:2.3:a:netapp:oncommand_unified_manager:9.4
Netapp » Oncommand Unified Manager » Version: 9.5

cpe:2.3:a:netapp:oncommand_unified_manager:9.5
Netapp » Ontap Select Deploy » Version: N/A

cpe:2.3:a:netapp:ontap_select_deploy:-
Netapp » Service Processor » Version: N/A

cpe:2.3:a:netapp:service_processor:-
Netapp » Steelstore Cloud Integrated Storage » Version: N/A

cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-
Netapp » Storage Replication Adapter » Version: 7.2

cpe:2.3:a:netapp:storage_replication_adapter:7.2
Netapp » Storage Replication Adapter » Version: 7.2.1

cpe:2.3:a:netapp:storage_replication_adapter:7.2.1
Netapp » Vasa Provider » Version: Any

cpe:2.3:a:netapp:vasa_provider:*
Netapp » Virtual Storage Console » Version: 7.2

cpe:2.3:a:netapp:virtual_storage_console:7.2
Netapp » Virtual Storage Console » Version: 7.2.1

cpe:2.3:a:netapp:virtual_storage_console:7.2.1
Openbsd » Openssh » Version: N/A

cpe:2.3:a:openbsd:openssh:-
Openbsd » Openssh » Version: 1.2

cpe:2.3:a:openbsd:openssh:1.2
Openbsd » Openssh » Version: 1.2.1

cpe:2.3:a:openbsd:openssh:1.2.1
Openbsd » Openssh » Version: 1.2.2

cpe:2.3:a:openbsd:openssh:1.2.2
Openbsd » Openssh » Version: 1.2.27

cpe:2.3:a:openbsd:openssh:1.2.27
Openbsd » Openssh » Version: 1.2.3

cpe:2.3:a:openbsd:openssh:1.2.3
Openbsd » Openssh » Version: 1.3

cpe:2.3:a:openbsd:openssh:1.3
Openbsd » Openssh » Version: 1.5

cpe:2.3:a:openbsd:openssh:1.5
Openbsd » Openssh » Version: 1.5.7

cpe:2.3:a:openbsd:openssh:1.5.7
Openbsd » Openssh » Version: 1.5.8

cpe:2.3:a:openbsd:openssh:1.5.8
Openbsd » Openssh » Version: 2

cpe:2.3:a:openbsd:openssh:2
Openbsd » Openssh » Version: 2.1

cpe:2.3:a:openbsd:openssh:2.1
Openbsd » Openssh » Version: 2.1.0

cpe:2.3:a:openbsd:openssh:2.1.0
Openbsd » Openssh » Version: 2.1.1

cpe:2.3:a:openbsd:openssh:2.1.1
Openbsd » Openssh » Version: 2.2

cpe:2.3:a:openbsd:openssh:2.2
Openbsd » Openssh » Version: 2.2.0

cpe:2.3:a:openbsd:openssh:2.2.0
Openbsd » Openssh » Version: 2.3

cpe:2.3:a:openbsd:openssh:2.3
Openbsd » Openssh » Version: 2.3.0

cpe:2.3:a:openbsd:openssh:2.3.0
Openbsd » Openssh » Version: 2.3.1

cpe:2.3:a:openbsd:openssh:2.3.1
Openbsd » Openssh » Version: 2.5

cpe:2.3:a:openbsd:openssh:2.5
Openbsd » Openssh » Version: 2.5.1

cpe:2.3:a:openbsd:openssh:2.5.1
Openbsd » Openssh » Version: 2.5.2

cpe:2.3:a:openbsd:openssh:2.5.2
Openbsd » Openssh » Version: 2.9

cpe:2.3:a:openbsd:openssh:2.9
Openbsd » Openssh » Version: 2.9.9

cpe:2.3:a:openbsd:openssh:2.9.9
Openbsd » Openssh » Version: 2.9.9p2

cpe:2.3:a:openbsd:openssh:2.9.9p2
Openbsd » Openssh » Version: 2.9p1

cpe:2.3:a:openbsd:openssh:2.9p1
Openbsd » Openssh » Version: 2.9p2

cpe:2.3:a:openbsd:openssh:2.9p2
Openbsd » Openssh » Version: 3.0

cpe:2.3:a:openbsd:openssh:3.0
Openbsd » Openssh » Version: 3.0.1

cpe:2.3:a:openbsd:openssh:3.0.1
Openbsd » Openssh » Version: 3.0.1p1

cpe:2.3:a:openbsd:openssh:3.0.1p1
Openbsd » Openssh » Version: 3.0.2

cpe:2.3:a:openbsd:openssh:3.0.2
Openbsd » Openssh » Version: 3.0.2p1

cpe:2.3:a:openbsd:openssh:3.0.2p1
Openbsd » Openssh » Version: 3.0p1

cpe:2.3:a:openbsd:openssh:3.0p1
Openbsd » Openssh » Version: 3.1

cpe:2.3:a:openbsd:openssh:3.1
Openbsd » Openssh » Version: 3.1p1

cpe:2.3:a:openbsd:openssh:3.1p1
Openbsd » Openssh » Version: 3.2

cpe:2.3:a:openbsd:openssh:3.2
Openbsd » Openssh » Version: 3.2.2

cpe:2.3:a:openbsd:openssh:3.2.2
Openbsd » Openssh » Version: 3.2.2p1

cpe:2.3:a:openbsd:openssh:3.2.2p1
Openbsd » Openssh » Version: 3.2.3

cpe:2.3:a:openbsd:openssh:3.2.3
Openbsd » Openssh » Version: 3.2.3p1

cpe:2.3:a:openbsd:openssh:3.2.3p1
Openbsd » Openssh » Version: 3.3

cpe:2.3:a:openbsd:openssh:3.3
Openbsd » Openssh » Version: 3.3p1

cpe:2.3:a:openbsd:openssh:3.3p1
Openbsd » Openssh » Version: 3.4

cpe:2.3:a:openbsd:openssh:3.4
Openbsd » Openssh » Version: 3.4p1

cpe:2.3:a:openbsd:openssh:3.4p1
Openbsd » Openssh » Version: 3.5

cpe:2.3:a:openbsd:openssh:3.5
Openbsd » Openssh » Version: 3.5p1

cpe:2.3:a:openbsd:openssh:3.5p1
Openbsd » Openssh » Version: 3.6

cpe:2.3:a:openbsd:openssh:3.6
Openbsd » Openssh » Version: 3.6.1

cpe:2.3:a:openbsd:openssh:3.6.1
Openbsd » Openssh » Version: 3.6.1p1

cpe:2.3:a:openbsd:openssh:3.6.1p1
Openbsd » Openssh » Version: 3.6.1p2

cpe:2.3:a:openbsd:openssh:3.6.1p2
Openbsd » Openssh » Version: 3.7

cpe:2.3:a:openbsd:openssh:3.7
Openbsd » Openssh » Version: 3.7.1

cpe:2.3:a:openbsd:openssh:3.7.1
Openbsd » Openssh » Version: 3.7.1p1

cpe:2.3:a:openbsd:openssh:3.7.1p1
Openbsd » Openssh » Version: 3.7.1p2

cpe:2.3:a:openbsd:openssh:3.7.1p2
Openbsd » Openssh » Version: 3.8

cpe:2.3:a:openbsd:openssh:3.8
Openbsd » Openssh » Version: 3.8.1

cpe:2.3:a:openbsd:openssh:3.8.1
Openbsd » Openssh » Version: 3.8.1p1

cpe:2.3:a:openbsd:openssh:3.8.1p1
Openbsd » Openssh » Version: 3.9

cpe:2.3:a:openbsd:openssh:3.9
Openbsd » Openssh » Version: 3.9.1

cpe:2.3:a:openbsd:openssh:3.9.1
Openbsd » Openssh » Version: 3.9.1p1

cpe:2.3:a:openbsd:openssh:3.9.1p1
Openbsd » Openssh » Version: 4.0

cpe:2.3:a:openbsd:openssh:4.0
Openbsd » Openssh » Version: 4.0p1

cpe:2.3:a:openbsd:openssh:4.0p1
Openbsd » Openssh » Version: 4.1

cpe:2.3:a:openbsd:openssh:4.1
Openbsd » Openssh » Version: 4.1p1

cpe:2.3:a:openbsd:openssh:4.1p1
Openbsd » Openssh » Version: 4.2

cpe:2.3:a:openbsd:openssh:4.2
Openbsd » Openssh » Version: 4.2p1

cpe:2.3:a:openbsd:openssh:4.2p1
Openbsd » Openssh » Version: 4.3

cpe:2.3:a:openbsd:openssh:4.3
Openbsd » Openssh » Version: 4.3p1

cpe:2.3:a:openbsd:openssh:4.3p1
Openbsd » Openssh » Version: 4.3p2

cpe:2.3:a:openbsd:openssh:4.3p2
Openbsd » Openssh » Version: 4.4

cpe:2.3:a:openbsd:openssh:4.4
Openbsd » Openssh » Version: 4.4p1

cpe:2.3:a:openbsd:openssh:4.4p1
Openbsd » Openssh » Version: 4.5

cpe:2.3:a:openbsd:openssh:4.5
Openbsd » Openssh » Version: 4.6

cpe:2.3:a:openbsd:openssh:4.6
Openbsd » Openssh » Version: 4.7

cpe:2.3:a:openbsd:openssh:4.7
Openbsd » Openssh » Version: 4.7p1

cpe:2.3:a:openbsd:openssh:4.7p1
Openbsd » Openssh » Version: 4.8

cpe:2.3:a:openbsd:openssh:4.8
Openbsd » Openssh » Version: 4.9

cpe:2.3:a:openbsd:openssh:4.9
Openbsd » Openssh » Version: 5.0

cpe:2.3:a:openbsd:openssh:5.0
Openbsd » Openssh » Version: 5.1

cpe:2.3:a:openbsd:openssh:5.1
Openbsd » Openssh » Version: 5.2

cpe:2.3:a:openbsd:openssh:5.2
Openbsd » Openssh » Version: 5.3

cpe:2.3:a:openbsd:openssh:5.3
Openbsd » Openssh » Version: 5.4

cpe:2.3:a:openbsd:openssh:5.4
Openbsd » Openssh » Version: 5.5

cpe:2.3:a:openbsd:openssh:5.5
Openbsd » Openssh » Version: 5.6

cpe:2.3:a:openbsd:openssh:5.6
Openbsd » Openssh » Version: 5.7

cpe:2.3:a:openbsd:openssh:5.7
Openbsd » Openssh » Version: 5.8

cpe:2.3:a:openbsd:openssh:5.8
Openbsd » Openssh » Version: 5.8p2

cpe:2.3:a:openbsd:openssh:5.8p2
Openbsd » Openssh » Version: 5.9

cpe:2.3:a:openbsd:openssh:5.9
Openbsd » Openssh » Version: 6.0

cpe:2.3:a:openbsd:openssh:6.0
Openbsd » Openssh » Version: 6.1

cpe:2.3:a:openbsd:openssh:6.1
Openbsd » Openssh » Version: 6.2

cpe:2.3:a:openbsd:openssh:6.2
Openbsd » Openssh » Version: 6.3

cpe:2.3:a:openbsd:openssh:6.3
Openbsd » Openssh » Version: 6.4

cpe:2.3:a:openbsd:openssh:6.4
Openbsd » Openssh » Version: 6.5

cpe:2.3:a:openbsd:openssh:6.5
Openbsd » Openssh » Version: 6.6

cpe:2.3:a:openbsd:openssh:6.6
Openbsd » Openssh » Version: 6.7

cpe:2.3:a:openbsd:openssh:6.7
Openbsd » Openssh » Version: 6.8

cpe:2.3:a:openbsd:openssh:6.8
Openbsd » Openssh » Version: 6.9

cpe:2.3:a:openbsd:openssh:6.9
Openbsd » Openssh » Version: 7.0

cpe:2.3:a:openbsd:openssh:7.0
Openbsd » Openssh » Version: 7.1

cpe:2.3:a:openbsd:openssh:7.1
Openbsd » Openssh » Version: 7.2

cpe:2.3:a:openbsd:openssh:7.2
Openbsd » Openssh » Version: 7.3

cpe:2.3:a:openbsd:openssh:7.3
Openbsd » Openssh » Version: 7.4

cpe:2.3:a:openbsd:openssh:7.4
Openbsd » Openssh » Version: 7.5

cpe:2.3:a:openbsd:openssh:7.5
Openbsd » Openssh » Version: 7.6

cpe:2.3:a:openbsd:openssh:7.6
Openbsd » Openssh » Version: 7.7

cpe:2.3:a:openbsd:openssh:7.7
Oracle » Sun Zfs Storage Appliance Kit » Version: 8.8.6

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.6
Netapp » Cn1610 » Version: N/A

cpe:2.3:h:netapp:cn1610:-
Siemens » Scalance X204rna » Version: N/A

cpe:2.3:h:siemens:scalance_x204rna:-
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Netapp » Clustered Data Ontap » Version: N/A

cpe:2.3:o:netapp:clustered_data_ontap:-
Netapp » Cn1610 Firmware » Version: N/A

cpe:2.3:o:netapp:cn1610_firmware:-
Netapp » Data Ontap » Version: N/A

cpe:2.3:o:netapp:data_ontap:-
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
Siemens » Scalance X204rna Firmware » Version: N/A

cpe:2.3:o:siemens:scalance_x204rna_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15473

Products

Pricing

Contact Us