CVE-2018-15599

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects…

published August 21, 2018

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02686 · 85.7th percentile
Published
2018-08-21T01:00Z
EPSS history
Timeline
  • 21 AUG 01:00Z
    The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects…
    cvelistv5