{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"openssh","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5ND3ZGQDS8DVPCDSFRR4ZKV","modified_at":"2026-10-23T18:04:46.924313056Z","published_at":"2018-08-28T08:29:00.207Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-15919","https://security-tracker.debian.org/tracker/CVE-2018-15919"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-15919#Debian:14/openssh","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-15919"}],"summary":"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states '"}