User Enumeration Vulnerability in Dropbear SSH Server

CVE-2018-15599

What is CVE-2018-15599?

The recv_msg_userauth_request function within the Dropbear SSH server contains a user enumeration vulnerability that allows attackers to determine the validity of usernames through the handling of fields in SSH_MSG_USERAUTH messages. This issue can be exploited by sending crafted authentication requests, revealing whether a username exists based on the server's response. This vulnerability is similar in nature to another identified issue in an unrelated codebase, making it critical for users of affected versions to implement necessary security measures and updates.

References