# CVE-2018-15473

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

- Page: https://www.vulneraibility.com/cve/CVE-2018-15473
- CVSS: 5.3
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 98.67% (percentile 99.9)
- Public exploit code: 3 on Exploit-DB · 1 Metasploit module · 41 GitHub proofs of concept (first 2018-08-16)
- CISA SSVC: exploitation poc, automatable no, technical impact partial (assessed 2025-12-17)
- Weakness: CWE-362
- Published: 2018-08-17

## Affected

- openbsd:openssh
- debian:debian_linux
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation
- canonical:ubuntu_linux
- netapp:cn1610_firmware
- netapp:aff_baseboard_management_controller
- netapp:cloud_backup
- netapp:data_ontap_edge
- netapp:fas_baseboard_management_controller
- netapp:oncommand_unified_manager
- netapp:ontap_select_deploy
- netapp:service_processor
- netapp:steelstore_cloud_integrated_storage
- netapp:virtual_storage_console
- netapp:clustered_data_ontap
- netapp:data_ontap
- netapp:vasa_provider
- netapp:storage_replication_adapter
- oracle:sun_zfs_storage_appliance_kit
- siemens:scalance_x204rna_firmware

## References

- [advisory] https://security.gentoo.org/glsa/201810-03
- [other] http://www.securitytracker.com/id/1041487
- [exploit] https://www.exploit-db.com/exploits/45233/
- [other] https://bugs.debian.org/906236
- [exploit] https://www.exploit-db.com/exploits/45210/
- [other] https://security.netapp.com/advisory/ntap-20181101-0001/
- [other] https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
- [advisory] https://usn.ubuntu.com/3809-1/
- [other] https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html
- [other] http://www.securityfocus.com/bid/105140
- [advisory] https://www.debian.org/security/2018/dsa-4280
- [exploit] https://www.exploit-db.com/exploits/45939/
- [other] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011
- [other] http://www.openwall.com/lists/oss-security/2018/08/15/5
- [advisory] https://access.redhat.com/errata/RHSA-2019:0711
- [advisory] https://access.redhat.com/errata/RHSA-2019:2143
- [other] https://www.oracle.com/security-alerts/cpujan2020.html
- [other] https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.