{"id":"CVE-2018-15473","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-15473","generatedAt":"2026-10-29T03:02:44.954Z","title":"OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and…","description":"OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.","published":"2018-08-17T19:29:00.000Z","lastModified":"2026-06-17T01:42:35.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-362"],"affected":["openbsd/openssh","debian/debian linux","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux workstation","canonical/ubuntu linux","netapp/cn1610 firmware","netapp/aff baseboard management controller","netapp/cloud backup","netapp/data ontap edge","netapp/fas baseboard management controller","netapp/oncommand unified manager","netapp/ontap select deploy","netapp/service processor","netapp/steelstore cloud integrated storage","netapp/virtual storage console","netapp/clustered data ontap","netapp/data ontap","netapp/vasa provider","netapp/storage replication adapter","oracle/sun zfs storage appliance kit","siemens/scalance x204rna firmware"],"epss":{"score":0.98675,"percentile":0.99924,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":3,"verified":true,"firstPublished":"2018-08-16","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45939,"kind":"exploit","title":"OpenSSH < 7.7 - User Enumeration (2)","url":"https://www.exploit-db.com/exploits/45939","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45939.py","file":"exploits/linux/remote/45939.py","published":"2018-12-04","added":"2018-12-04","updated":"2018-12-04","author":"Leap Security","type":"remote","platform":"linux","port":22,"verified":false,"codes":["CVE-2018-15473"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":45233,"kind":"exploit","title":"OpenSSH 2.3 < 7.7 - Username Enumeration","url":"https://www.exploit-db.com/exploits/45233","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45233.py","file":"exploits/linux/remote/45233.py","published":"2018-08-21","added":"2018-08-21","updated":"2018-10-01","author":"Justin Gardner","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2018-15473"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt45500/screen-shot-2018-10-01-at-232201.png","referenceUrl":null},{"edbId":45210,"kind":"exploit","title":"OpenSSH 2.3 < 7.7 - Username Enumeration (PoC)","url":"https://www.exploit-db.com/exploits/45210","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45210.py","file":"exploits/linux/remote/45210.py","published":"2018-08-16","added":"2018-08-17","updated":"2018-10-04","author":"Matthew Daley","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2018-15473"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt45500/screen-shot-2018-10-04-at-071418.png","referenceUrl":"https://bugfuzz.com/stuff/ssh-check-username.py"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 98.7%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2018/08/15/5","tags":["Mailing List","Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/105140","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1041487","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:0711","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:2143","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://bugs.debian.org/906236","tags":["Issue Tracking","Mailing List","Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0","tags":["Patch"],"source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201810-03","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20181101-0001/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/3809-1/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2018/dsa-4280","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45210/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45233/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45939/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2018/08/15/5","tags":["Mailing List","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/105140","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041487","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:0711","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:2143","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.debian.org/906236","tags":["Issue Tracking","Mailing List","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201810-03","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20181101-0001/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3809-1/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2018/dsa-4280","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45210/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45233/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45939/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-15473","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}