OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username     and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a     challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not     recognize user enumeration as a vulnerability for this product (CVE-2016-20012)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its banner, the version of OpenSSH running on the remote host is potentially affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the openssh package has been released.

ID	Name	Product	Family	Type	Severity
219233	Linux Distros Unpatched Vulnerability : CVE-2016-20012	Nessus	Misc.	Local	medium
159492	OpenSSH PCI Disputed Vulnerabilities.	Nessus	Misc.	Remote	high
153972	Photon OS 4.0: Openssh PHSA-2021-4.0-0113	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2016-20012

medium

Tenable Plugins

medium

high

high