The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user     enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are     handled, a similar issue to CVE-2018-15473 in an unrelated codebase. (CVE-2018-15599)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user
    enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are
    handled, a similar issue to CVE-2018-15473 in an unrelated codebase. (CVE-2018-15599)

A vulnerability in dropbear, a lightweight SSH2 server and client, making it possible to guess valid usernames has been found :

CVE-2018-15599 :

The recv_msg_userauth_request function in svr-auth.c in is prone to a user enumeration vulnerability, similar to CVE-2018-15473 in OpenSSH.

For Debian 8 'Jessie', this problem has been fixed in version 2014.65-1+deb8u3.

We recommend that you upgrade your dropbear packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
251914	Linux Distros Unpatched Vulnerability : CVE-2018-15599	Nessus	Misc.	Local	medium
423874	Alpine: multiple dropbear packages: security update to 2018.76-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	medium
423874	Alpine: multiple dropbear packages: security update to 2018.76-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	medium
404181	Alpine: dropbear: security update to 2017.75-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	medium
404181	Alpine: dropbear: security update to 2017.75-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	medium
400685	Alpine: multiple dropbear packages: security update to 2018.76-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	medium
400685	Alpine: multiple dropbear packages: security update to 2018.76-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	medium
112125	Debian DLA-1476-1 : dropbear security update	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2018-15599

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium