UpHeron
All vulnerabilities

Servers and applications

CVE-2018-15473

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Severity
Medium 5.3
Published
17 Aug 2018
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSHServers and applications · cpe:a:openbsd:openssh
  • Every version up to 7.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-15473
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-15473