What’s Vulnerable › Vulnerabilities

CVE-2018-15599

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-21 · updated 2026-06-17
• Weakness: CWE-200

Description

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Affected products

• Debian Linux: 8.0
• [UNKNOWN] dropbear: through 2018.76

References

• http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002108.html
• http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002109.html
• https://lists.debian.org/debian-lts-announce/2018/08/msg00026.html
• https://matt.ucc.asn.au/dropbear/CHANGES
• https://old.reddit.com/r/blackhat/comments/97ywnm/openssh_username_enumeration/e4e05n2/
• http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002108.html
• http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002109.html
• https://lists.debian.org/debian-lts-announce/2018/08/msg00026.html
• https://matt.ucc.asn.au/dropbear/CHANGES
• https://old.reddit.com/r/blackhat/comments/97ywnm/openssh_username_enumeration/e4e05n2/

Get alerted when CVE-2018-15599 or the next vulnerability affects your stack