| Package | Affected versions | Patched versions |
|---|---|---|
| dropbear ssh | ≤ 2018.76 |
The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free