What’s Vulnerable › Vulnerabilities

CVE-2018-15473

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 98.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-08-17 · updated 2026-06-17
• Weakness: CWE-362

Description

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04
• Debian Linux: 8.0, 9.0
• NetApp Aff Baseboard Management Controller: all versions
• NetApp Cloud Backup: all versions
• Clustered Data ONTAP: all versions
• NetApp Cn1610 Firmware: all versions
• NetApp Data ONTAP operating in 7-Mode: all versions
• NetApp Data Ontap Edge: all versions
• NetApp Fas Baseboard Management Controller: all versions
• NetApp OnCommand Unified Manager for 7-Mode (core package): from 9.4
• NetApp Ontap Select Deploy: all versions
• NetApp, Inc. NetApp Service Processor: all versions
• NetApp Steelstore Cloud Integrated Storage: all versions
• NetApp Storage Replication Adapter: from 7.2
• NetApp VASA Provider for Clustered Data ONTAP: from 7.2
• NetApp Virtual Storage Console: from 7.2
• OpenSSH: through 7.7
• Oracle Corporation Sun ZFS Storage Appliance Kit (AK) Software: 8.8.6
• RedHat Enterprise Linux Desktop: 6.0, 7.0
• RedHat Enterprise Linux Server: 6.0, 7.0
• RedHat Enterprise Linux Workstation: 6.0, 7.0
• Siemens Scalance X204Rna Firmware: before 3.2.7 — fixed in 3.2.7

How to fix

Upgrade to a fixed version: Siemens Scalance X204Rna Firmware 3.2.7. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2018/08/15/5
• http://www.securityfocus.com/bid/105140
• http://www.securitytracker.com/id/1041487
• https://access.redhat.com/errata/RHSA-2019:0711
• https://access.redhat.com/errata/RHSA-2019:2143
• https://bugs.debian.org/906236
• https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
• https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
• https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011
• https://security.gentoo.org/glsa/201810-03
• https://security.netapp.com/advisory/ntap-20181101-0001/

Get alerted when CVE-2018-15473 or the next vulnerability affects your stack