Total vulnerabilities in the database
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
| Software | From | Fixed in |
|---|---|---|
| openbsd / openssh | - | 7.7.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / enterprise_linux_desktop | 7.0 | 7.0.x |
| redhat / enterprise_linux_workstation | 7.0 | 7.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux_desktop | 6.0 | 6.0.x |
| redhat / enterprise_linux_server | 6.0 | 6.0.x |
| redhat / enterprise_linux_workstation | 6.0 | 6.0.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| netapp / oncommand_unified_manager | 9.4 | 9.4.x |
| netapp / virtual_storage_console | 7.2 | 7.2.x |
| netapp / vasa_provider | 7.2 | 7.2.x |
| netapp / storage_replication_adapter | 7.2 | 7.2.x |
| oracle / sun_zfs_storage_appliance_kit | 8.8.6 | 8.8.6.x |
| siemens / scalance_x204rna_firmware | - | 3.2.7 |