Vulnerability Intelligence Report
CVE-2018-15473
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
No Active Exploit Signals
CVSS Base Score
5.9
MEDIUM
Exploitability:2.3
Impact Score:3.6
EPSS Probability:98.63%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-362 ↗CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| openbsd | openssh | all |
| debian | debian_linux | 8.0, 9.0 |
| redhat | enterprise_linux_desktop | 6.0, 7.0 |
| redhat | enterprise_linux_server | 6.0, 7.0 |
| redhat | enterprise_linux_workstation | 6.0, 7.0 |
| canonical | ubuntu_linux | 14.04, 16.04, 18.04 |
| netapp | cn1610_firmware | all |
| netapp | cn1610 | all |
| netapp | aff_baseboard_management_controller | all |
| netapp | cloud_backup | all |
| netapp | data_ontap_edge | all |
| netapp | fas_baseboard_management_controller | all |
| netapp | oncommand_unified_manager | all |
| netapp | ontap_select_deploy | all |
| netapp | service_processor | all |
| netapp | steelstore_cloud_integrated_storage | all |
| netapp | virtual_storage_console | all |
| netapp | clustered_data_ontap | all |
| netapp | data_ontap | all |
| netapp | vasa_provider | all |
| netapp | storage_replication_adapter | all |
| oracle | sun_zfs_storage_appliance_kit | 8.8.6 |
| siemens | scalance_x204rna_firmware | all |
| siemens | scalance_x204rna | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
98.631%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2018-08-17T00:00:00 |
| Published | 2018-08-17T00:00:00 |
| Patch Date | 2018-08-17 |
| Last Updated | 2025-12-17T21:22:47 |
Community Chatter & Buzz