CVE catalog

CVE-2018-15473

openssh: CVE-2018-15473

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
Published
Source
[NVD] · [CVE record]
EPSS
98.67% · Oct 22, 2026

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopensshsid1:10.6p1-1fixed
Debianopensshforky1:10.6p1-1fixed
Debianopensshtrixie1:10.0p1-7+deb13u4fixed
Debianopensshtrixie-security1:10.0p1-7+deb13u2fixed
Debianopensshbookworm1:9.2p1-2+deb12u10fixed
Debianopensshbookworm-security1:9.2p1-2+deb12u9fixed
Alpineopenssh3.107.7_p1-r4fixed
Alpineopenssh3.117.7_p1-r4fixed
Alpineopenssh3.127.7_p1-r4fixed
Alpineopenssh3.137.7_p1-r4fixed
Alpineopenssh3.147.7_p1-r4fixed
Alpineopenssh3.157.7_p1-r4fixed
Alpineopenssh3.167.7_p1-r4fixed
Alpineopenssh3.177.7_p1-r4fixed
Alpineopenssh3.187.7_p1-r4fixed
Alpineopenssh3.197.7_p1-r4fixed
Alpineopenssh3.207.7_p1-r4fixed
Alpineopenssh3.217.7_p1-r4fixed
Alpineopenssh3.227.7_p1-r4fixed
Alpineopenssh3.237.7_p1-r4fixed
Alpineopenssh3.247.7_p1-r4fixed
Alpineopenssh3.57.4_p1-r2fixed
Alpineopenssh3.67.5_p1-r3fixed
Alpineopenssh3.77.5_p1-r9fixed
Alpineopenssh3.87.7_p1-r3fixed
Alpineopenssh3.97.7_p1-r4fixed
Susessh-auditpackage hub 15 sp32.5.0-bp153.2.3.1fixed
Opensusessh-auditleap 15.32.5.0-bp153.2.3.1fixed
Ubuntuopenssh14.041:6.2p2-6vulnerable
Ubuntuopenssh14.041:6.2p2-6ubuntu1vulnerable
Ubuntuopenssh14.041:6.4p1-1vulnerable
Ubuntuopenssh14.041:6.4p1-2vulnerable
Ubuntuopenssh14.041:6.5p1-1vulnerable
Ubuntuopenssh14.041:6.5p1-2vulnerable
Ubuntuopenssh14.041:6.5p1-3vulnerable
Ubuntuopenssh14.041:6.5p1-4vulnerable
Ubuntuopenssh14.041:6.5p1-6vulnerable
Ubuntuopenssh14.041:6.6p1-1vulnerable
Ubuntuopenssh14.041:6.6p1-2vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu1vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.2vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.3vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.4vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.6vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.7vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.8vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.10vulnerable
Ubuntuopenssh14.041:6.6p1-2ubuntu2.11fixed
Ubuntuopenssh16.041:6.9p1-2vulnerable
Ubuntuopenssh16.041:6.9p1-3vulnerable
Ubuntuopenssh16.041:7.1p1-1vulnerable
Ubuntuopenssh16.041:7.1p1-3vulnerable
Ubuntuopenssh16.041:7.1p1-4vulnerable
Ubuntuopenssh16.041:7.1p1-6vulnerable
Ubuntuopenssh16.041:7.1p2-1vulnerable
Ubuntuopenssh16.041:7.1p2-2vulnerable
Ubuntuopenssh16.041:7.2p1-1vulnerable
Ubuntuopenssh16.041:7.2p2-1vulnerable
Ubuntuopenssh16.041:7.2p2-2vulnerable
Ubuntuopenssh16.041:7.2p2-3vulnerable
Ubuntuopenssh16.041:7.2p2-4vulnerable
Ubuntuopenssh16.041:7.2p2-4ubuntu1vulnerable
Ubuntuopenssh16.041:7.2p2-4ubuntu2.1vulnerable
Ubuntuopenssh16.041:7.2p2-4ubuntu2.2vulnerable
Ubuntuopenssh16.041:7.2p2-4ubuntu2.4vulnerable
Ubuntuopenssh16.041:7.2p2-4ubuntu2.5vulnerable
Ubuntuopenssh16.041:7.2p2-4ubuntu2.6fixed
Ubuntuopenssh18.041:7.5p1-10vulnerable
Ubuntuopenssh18.041:7.6p1-4vulnerable
Ubuntuopenssh18.041:7.6p1-4ubuntu0.1fixed
Suseopensshlinux enterprise module for basesystem 157.6p1-9.3.1fixed
Suseopenssh-askpass-gnomelinux enterprise module for desktop applications 157.6p1-9.3.1fixed
Suseopensshlinux enterprise module for server applications 157.6p1-9.3.1fixed
Suseopenssh-openssl1linux enterprise server 11-security6.6p1-19.6.1fixed
Suseopensshlinux enterprise server 12-ltss6.6p1-54.18.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12-ltss6.6p1-54.18.1fixed
Suseopensshlinux enterprise server 12 sp1-ltss6.6p1-54.18.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp1-ltss6.6p1-54.18.1fixed
Opensusessh-auditleap 15.22.5.0-lp152.2.3.1fixed
Suseopensshopenstack cloud 77.2p2-74.30.1fixed
Suseopenssh-askpass-gnomeopenstack cloud 77.2p2-74.30.1fixed
Suseopensshlinux enterprise desktop 12 sp37.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise desktop 12 sp37.2p2-74.30.1fixed
Suseopensshlinux enterprise desktop 12 sp47.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise desktop 12 sp47.2p2-74.30.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp27.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp27.2p2-74.30.1fixed
Suseopensshlinux enterprise server 12 sp2-ltss7.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp2-ltss7.2p2-74.30.1fixed
Suseopensshlinux enterprise server 12 sp2-bcl7.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp2-bcl7.2p2-74.30.1fixed
Suseopensshlinux enterprise server 12 sp37.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp37.2p2-74.30.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp37.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp37.2p2-74.30.1fixed
Suseopensshlinux enterprise server 12 sp47.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp47.2p2-74.30.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp47.2p2-74.30.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp47.2p2-74.30.1fixed
Suseopensshenterprise storage 47.2p2-74.30.1fixed
Suseopenssh-askpass-gnomeenterprise storage 47.2p2-74.30.1fixed
Opensusessh-audittumbleweed2.5.0-1.2fixed
Suseopensshlinux enterprise server 11 sp46.6p1-36.6.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 11 sp46.6p1-36.6.1fixed
Suseopensshlinux enterprise server for sap applications 11 sp46.6p1-36.6.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 11 sp46.6p1-36.6.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp16.6p1-54.18.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp16.6p1-54.18.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopensshsourcesid1:7.7p1-4not yet assignedNot reported[906236]
Debianopensshsourceforky1:7.7p1-4not yet assignedNot reported[906236]
Debianopensshsourcetrixie1:7.7p1-4not yet assignedNot reported[906236]
Debianopensshsourcebookworm1:7.7p1-4not yet assignedNot reported[906236]
Alpineopensshapk3.107.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.117.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.127.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.137.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.147.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.157.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.167.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.177.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.187.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.197.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.207.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.217.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.227.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.237.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.247.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.57.4_p1-r2Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.67.5_p1-r3Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.77.5_p1-r9Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.87.7_p1-r3Not reportedALPINE-CVE-2018-15473Not reported
Alpineopensshapk3.97.7_p1-r4Not reportedALPINE-CVE-2018-15473Not reported
Susessh-auditrpmpackage hub 15 sp32.5.0-bp153.2.3.1Not reportedOPENSUSE-SU-2021:1390-1Not reported
Opensusessh-auditrpmleap 15.32.5.0-bp153.2.3.1Not reportedOPENSUSE-SU-2021:1390-1Not reported
Ubuntuopensshdeb14.041:6.6p1-2ubuntu2.11Not reportedUBUNTU-CVE-2018-15473Not reported
Ubuntuopensshdeb16.041:7.2p2-4ubuntu2.6Not reportedUBUNTU-CVE-2018-15473Not reported
Ubuntuopensshdeb18.041:7.6p1-4ubuntu0.1Not reportedUBUNTU-CVE-2018-15473Not reported
Suseopensshrpmlinux enterprise module for basesystem 157.6p1-9.3.1Not reportedSUSE-SU-2018:3686-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise module for desktop applications 157.6p1-9.3.1Not reportedSUSE-SU-2018:3686-1Not reported
Suseopensshrpmlinux enterprise module for server applications 157.6p1-9.3.1Not reportedSUSE-SU-2018:3686-1Not reported
Suseopenssh-openssl1rpmlinux enterprise server 11-security6.6p1-19.6.1Not reportedSUSE-SU-2018:3768-1Not reported
Suseopensshrpmlinux enterprise server 12-ltss6.6p1-54.18.1Not reportedSUSE-SU-2018:3776-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12-ltss6.6p1-54.18.1Not reportedSUSE-SU-2018:3776-1Not reported
Suseopensshrpmlinux enterprise server 12 sp1-ltss6.6p1-54.18.1Not reportedSUSE-SU-2018:3776-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp1-ltss6.6p1-54.18.1Not reportedSUSE-SU-2018:3776-1Not reported
Opensusessh-auditrpmleap 15.22.5.0-lp152.2.3.1Not reportedOPENSUSE-SU-2021:1383-1Not reported
Suseopensshrpmopenstack cloud 77.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmopenstack cloud 77.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise desktop 12 sp37.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise desktop 12 sp37.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise desktop 12 sp47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise desktop 12 sp47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp27.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp27.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server 12 sp2-ltss7.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp2-ltss7.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server 12 sp2-bcl7.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp2-bcl7.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server 12 sp37.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp37.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp37.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp37.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server 12 sp47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopensshrpmenterprise storage 47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Suseopenssh-askpass-gnomerpmenterprise storage 47.2p2-74.30.1Not reportedSUSE-SU-2018:3910-1Not reported
Opensusessh-auditrpmtumbleweed2.5.0-1.2Not reportedOPENSUSE-SU-2024:11407-1Not reported
Suseopensshrpmlinux enterprise server 11 sp46.6p1-36.6.1Not reportedSUSE-SU-2018:3781-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 11 sp46.6p1-36.6.1Not reportedSUSE-SU-2018:3781-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 11 sp46.6p1-36.6.1Not reportedSUSE-SU-2018:3781-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 11 sp46.6p1-36.6.1Not reportedSUSE-SU-2018:3781-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp16.6p1-54.18.1Not reportedSUSE-SU-2018:3776-2Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp16.6p1-54.18.1Not reportedSUSE-SU-2018:3776-2Not reported

[Debian bug #906236]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [openssh-client]Fixed

    Source package: [openssh]

    Details (8)

    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [openssh-client-gssapi]Fixed

    Source package: [openssh]

    Details (2)

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [openssh-server]Fixed

    Source package: [openssh]

    Details (8)

    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [openssh-server-gssapi]Fixed

    Source package: [openssh]

    Details (2)

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [openssh-sftp-server]Fixed

    Source package: [openssh]

    Details (8)

    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [openssh-tests]Fixed

    Source package: [openssh]

    Details (8)

    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [ssh]Fixed

    Source package: [openssh]

    Details (8)

    • 1:9.2p1-2+deb12u10 · all · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · all · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · all · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · all · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · all · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · all · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

  • [ssh-askpass-gnome]Fixed

    Source package: [openssh]

    Details (8)

    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · bookworm; dsa · openssh · debian · 12

[Debian 13 (Trixie)]

  • [openssh-client]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [openssh-client-gssapi]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · all · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · all · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · all · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · all · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · all · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · all · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [openssh-server]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [openssh-server-gssapi]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · all · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · all · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · all · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · all · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · all · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · all · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [openssh-sftp-server]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [openssh-tests]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [ssh]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · all · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · all · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · all · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · all · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · all · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · all · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

  • [ssh-askpass-gnome]Fixed

    Source package: [openssh]

    Details (6)

    • 1:10.0p1-7+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

    • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1:7.7p1-4

      dsa · openssh · debian · 13

[openSUSE Tumbleweed]

  • [ssh-audit]Fixed

    Source package: [ssh-audit]

    Details (1)

    • 3.9.0-1.1 · noarch · tumbleweed

      Fixed · Fixed: 2.5.0-1.2

      dsa · ssh-audit · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]