Description
The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 alpine v3.19 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.20 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.5 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || >=0 <2017.75-r1 | 2017.75-r1 |
alpine v3.10 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.11 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.12 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.13 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.14 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.15 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
alpine v3.16 | | =0.52-r0 || =0.52-r1 || =0.52-r2 || =0.52-r3 || =0.52-r4 || =0.53.1-r0 || =0.53.1-r1 || =2012.55-r0 || =2013.58-r0 || =2014.63-r0 || =2014.65-r0 || =2014.66-r0 || =2014.66-r1 || =2015.67-r0 || =2015.68-r0 || =2015.68-r1 || =2015.68-r2 || =2015.70-r2 || =2015.71-r0 || =2015.71-r1 || =2016.73-r0 || =2016.74-r0 || =2016.74-r1 || =2017.75-r0 || =2017.75-r1 || =2018.76-r0 || =2018.76-r1 || >=0 <2018.76-r2 | 2018.76-r2 |
