CVE-2016-3115
22.03.2016, 10:59
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openbsd | openssh | 𝑥 ≤ 7.2 |
| oracle | vm_server | 3.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| openssh |
| ||||
| openssh-askpass |
| ||||
| openssh-clients |
| ||||
| openssh-keycat |
| ||||
| openssh-ldap |
| ||||
| openssh-server |
| ||||
| openssh-server-sysvinit |
| ||||
| pam |
|
References