OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username
    and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a
    challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not
    recognize user enumeration as a vulnerability for this product (CVE-2016-20012)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username     and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a     challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not     recognize user enumeration as a vulnerability for this product (CVE-2016-20012)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its banner, the version of OpenSSH running on the remote host is potentially affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the openssh package has been released.

ID	Name	Product	Family	Type	Severity
459123	Echo: openssh: security update to 1:9.2p1-2+deb12u6	Tenable Cloud Security	Echo Local Security Checks	Local	medium
459123	Echo: openssh: security update to 1:9.2p1-2+deb12u6	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
219233	Linux Distros Unpatched Vulnerability : CVE-2016-20012	Nessus	Misc.	Local	medium
159492	OpenSSH PCI Disputed Vulnerabilities.	Nessus	Misc.	Remote	high
153972	Photon OS 4.0: Openssh PHSA-2021-4.0-0113	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2016-20012

medium

Tenable Plugins

medium

medium

medium

high

high