OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - openssh: User enumeration via malformed packets in authentication requests (CVE-2018-15919)

  - openssh: authentication bypass via row hammer attack (CVE-2023-51767)

  - OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username     and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a     challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not     recognize user enumeration as a vulnerability for this product (CVE-2016-20012)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - openssh: Public key information leak (CVE-2016-20012)

  - openssh: authentication bypass via row hammer attack (CVE-2023-51767)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to its banner, the version of OpenSSH running on the remote host is potentially affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the openssh package has been released.

ID	Name	Product	Family	Severity
198948	RHEL 8 : openssh (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198870	RHEL 9 : openssh (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195419	RHEL 7 : openssh (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
195377	RHEL 6 : openssh (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
159492	OpenSSH PCI Disputed Vulnerabilities.	Nessus	Misc.	high
153972	Photon OS 4.0: Openssh PHSA-2021-4.0-0113	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2016-20012

medium

Tenable Plugins

high

high

high

high

high

high