Every CVE Search/ Get API key

CVE-2018-15599

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a...

5.3 MediumFix available

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

2.69%Up 1.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.3

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
CVE-2018-15599
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
CVE-2018-15599
Updated
2026-11-02
EUVDEUVD-2018-7472 No score

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
EUVD-2018-7472
Updated
2026-11-03
GitHub AdvisoriesGHSA-g4h3-rm2q-r287 5.3

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a...

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
GHSA-g4h3-rm2q-r287
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVALPINE-CVE-2018-15599 5.3

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
ALPINE-CVE-2018-15599
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSV 5.3

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
CVE-2018-15599
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2018-15599 5.3

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
DEBIAN-CVE-2018-15599
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-15599 5.3

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

Record
UBUNTU-CVE-2018-15599
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVMGASA-2018-0384 No score

Updated dropbear packages fix security vulnerability

Dropbear is prone to a user enumeration vulnerability (CVE-2018-15599). An external user without credentials can determine whether a given username exists on a server.

Record
MGASA-2018-0384
Updated
2026-11-02
OSVopenSUSE-SU-2024:11383-1 No score

signing-party-2.11-1.3 on GA media

These are all security issues fixed in the signing-party-2.11-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11383-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dropbear
Alpine:v3.10
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.11
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.12
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.13
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.14
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.15
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.16
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.17
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.18
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.19
 before 2018.76-r2
2018.76-r2
Show 18 moreShow less
Affected packages
PackageAffectedFixed
dropbear
Alpine:v3.20
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.21
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.22
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.23
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.24
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.5
 before 2017.75-r1
2017.75-r1
dropbear
Alpine:v3.6
 before 2017.75-r1
2017.75-r1
dropbear
Alpine:v3.7
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.8
 before 2018.76-r2
2018.76-r2
dropbear
Alpine:v3.9
 before 2018.76-r2
2018.76-r2
dropbear
Debian:12
 before 2018.76-4
2018.76-4
dropbear
Debian:13
 before 2018.76-4
2018.76-4
dropbear
Debian:14
 before 2018.76-4
2018.76-4
dropbear
Debian:8
 before 2014.65-1+deb8u3, plus listed versions
2014.65-12014.65-1+deb8u12014.65-1+deb8u2
2014.65-1+deb8u3
dropbear
Mageia:6
 before 2017.75-1.1.mga6
2017.75-1.1.mga6
dropbear
Ubuntu:16.04:LTS
 All versions, plus listed versions
2014.65-1ubuntu22015.68-12015.70-12015.71-12016.72-1
 None known
dropbear
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2017.75-22017.75-3build12017.75-3ubuntu0.1~esm1
 None known
signing-party
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.11-1.3
2.11-1.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-15599 is a medium vulnerability (CVSS 5.3) in Dropbear Ssh Project Ssh, published August 21, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.69%, the 85th percentile. Fixed in dropbear 2018.76-r2.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open