• Status Closed
  • Percent Complete
  • Task Type Security Issue
  • Category Any
  • Assigned To
    Jesús E.
    Tobias Dausend
    André Silva
  • Operating System All
  • Severity Medium
  • Priority Medium
  • Reported Version Any
  • Due in Version Milky Way v0.4
  • Due Date Undecided
  • Votes
  • Private
Attached to Project: Packages
Opened by Luke - 02/09/2018
Last edited by Jesús E. - 18/11/2021

FS#1157 - [openssh] CVE-2018-15919

Remotely observable behavior in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states ‘We understand that the OpenSSH developers do not want to treat such a username enumeration (or “oracle”) as a vulnerability.’

Closed by  Jesús E.
18.11.2021 01:24
Reason for closing:  Already fixed
Date User Effort (H:M)


Available keyboard shortcuts


Task Details

Task Editing