Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2018-15473

Quick assessment

Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 7.7及之前版本中存在竞争条件问题漏洞。该漏洞源于网络系统或产品在运行过程中，并发代码需要互斥地访问共享资源时，对于并发访问的处理不当。

AI Predicted 3.1 Difficulty: Trivial EPSS 98.63% · P100
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-15473

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
OpenSSH 竞争条件问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 7.7及之前版本中存在竞争条件问题漏洞。该漏洞源于网络系统或产品在运行过程中，并发代码需要互斥地访问共享资源时，对于并发访问的处理不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2018-15473

# POC Description Source Link Shenlong Link
1 OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473). https://github.com/trimstray/massh-enum POC Details
2 CVE-2018-15473 - Opensshenum is an user enumerator exploiting an OpenSsh bug https://github.com/gbonacini/opensshenum POC Details
3 Exploit written in Python for CVE-2018-15473 with threading and export formats https://github.com/Rhynorater/CVE-2018-15473-Exploit POC Details
4 Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473 https://github.com/epi052/cve-2018-15473 POC Details
5 OpenSSH < 7.7 User Enumeration CVE-2018-15473 Exploit https://github.com/pyperanger/CVE-2018-15473_exploit POC Details
6 OpenSSH 7.7 - Username Enumeration https://github.com/r3dxpl0it/CVE-2018-15473 POC Details
7 Fully functional script for brute forcing SSH and trying credentials - CVE-2018-15473 https://github.com/JoeBlackSecurity/SSHUsernameBruter-SSHUB POC Details
8 cve-2018-15473 https://github.com/cved-sources/cve-2018-15473 POC Details
9 This is a exp of CVE-2018-15473 https://github.com/LINYIKAI/CVE-2018-15473-exp POC Details
10 OpenSSH 用户名枚举漏洞（CVE-2018-15473） https://github.com/trickster1103/- POC Details
11 SSH account enumeration verification script(CVE-2018-15473) https://github.com/NHPT/SSH-account-enumeration-verification-script POC Details
12 CVE-2018-15473-Exploit https://github.com/CaioCGH/EP4-redes POC Details
13 Project with sublist3r, massan, CVE-2018-15473, ssh bruteforce, ftp bruteforce and nikto. https://github.com/Moon1705/easy_security POC Details
14 Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability (CVE-2018-15473) in those identified. https://github.com/An0nYm0u5101/enumpossible POC Details
15 None https://github.com/Wh1t3Fox/cve-2018-15473 POC Details
16 None https://github.com/1stPeak/CVE-2018-15473 POC Details
17 openssh<7.7 用户名枚举 https://github.com/coollce/CVE-2018-15473_burte POC Details
18 None https://github.com/Dirty-Racoon/CVE-2018-15473-py3 POC Details
19 OpenSSH 2.3 < 7.7 - Username Enumeration https://github.com/Sait-Nuri/CVE-2018-15473 POC Details
20 None https://github.com/WildfootW/CVE-2018-15473_OpenSSH_7.7 POC Details
21 CVE-2018-15473 Exploit https://github.com/MrDottt/CVE-2018-15473 POC Details
22 Test CVE-2018-15473 exploit on Shodan IP https://github.com/66quentin/shodan-CVE-2018-15473 POC Details
23 None https://github.com/0xrobiul/CVE-2018-15473 POC Details
24 None https://github.com/philippedixon/CVE-2018-15473 POC Details
25 SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of python2. https://github.com/sergiovks/SSH-User-Enum-Python3-CVE-2018-15473 POC Details
26 None https://github.com/Anonimo501/ssh_enum_users_CVE-2018-15473 POC Details
27 None https://github.com/mclbn/docker-cve-2018-15473 POC Details
28 User enumeration for CVE-2018-15473 https://github.com/GaboLC98/userenum-CVE-2018-15473 POC Details
29 SSH Username Enumeration https://github.com/mrblue12-byte/CVE-2018-15473 POC Details
30 None https://github.com/4xolotl/CVE-2018-15473 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-15473

请登录查看更多情报信息。

Patches & Fixes for CVE-2018-15473 (1)

Vendor Advisories for CVE-2018-15473 (11)

Exploits & Public PoCs for CVE-2018-15473 (3)

Mailing List Discussions for CVE-2018-15473 (2)

Other References for CVE-2018-15473 (1)

Same Patch Batch · n/a · 2018-08-17 · 11 CVEs total

CVE-2018-15468 Xen 安全漏洞
CVE-2018-15469 Xen 安全漏洞
CVE-2018-15470 Xen 安全漏洞
CVE-2018-15471 Linux kernel 缓冲区错误漏洞
CVE-2018-14057 Pimcore 跨站请求伪造漏洞
CVE-2018-14058 Pimcore SQL注入漏洞
CVE-2018-6622 Trusted Platform Module 安全漏洞
CVE-2018-14981 Android 访问控制错误漏洞
CVE-2018-14982 Android GNSS application 访问控制错误漏洞
CVE-2018-15482 Android 访问控制错误漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-15473

No comments yet

Leave a comment