POC and patch for the CVE-2018-15473

Wed Apr 24 10:24:03 UTC 2019

Brahmanand Reddy <brahma.gdb at gmail.com> writes:
> regarding the CVE-2018-15473 dint find find official patch from the openssh
> on freebsd OS base.

CVE-2018-15473 is a user existence oracle bug which does not meet our
criteria for security advisories.

FreeBSD 12 has OpenSSH 7.8, which is patched.  FreeBSD 11 has OpenSSH
7.5, which is not.

DES
-- 
Dag-Erling Smørgrav - des at FreeBSD.org