RHSA-2015:2088

Vulnerability from csaf_opensuse - Published: 2015-11-19 00:00 - Updated: 2026-09-20 10:55
Summary
security update for openssh
Severity
Moderate
Notes
Title of the patch: security update for openssh
Description of the patch: This security update provides a functional equivalent of RHSA-2015:2088. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:2088.
Patchnames: RHSA-2015:2088
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2015-5600
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2015-6563
Affected products
Recommended 9 products, the same list as for CVE-2015-5600
Threats
Impact moderate
CVE-2015-6564
Affected products
Recommended 9 products, the same list as for CVE-2015-5600
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2015-5600/ self
https://www.suse.com/security/cve/CVE-2015-6563/ self
https://www.suse.com/security/cve/CVE-2015-6564/ self
https://www.suse.com/security/cve/CVE-2015-5600 external
https://bugzilla.suse.com/1009988 external
https://bugzilla.suse.com/1074631 external
https://bugzilla.suse.com/1138392 external
https://bugzilla.suse.com/938746 external
https://bugzilla.suse.com/943006 external
https://bugzilla.suse.com/943007 external
https://bugzilla.suse.com/943010 external
https://bugzilla.suse.com/943504 external
https://bugzilla.suse.com/945985 external
https://bugzilla.suse.com/948086 external
https://bugzilla.suse.com/954457 external
https://bugzilla.suse.com/957883 external
https://bugzilla.suse.com/996040 external
https://www.suse.com/security/cve/CVE-2015-6563 external
https://bugzilla.suse.com/1074631 external
https://bugzilla.suse.com/943006 external
https://bugzilla.suse.com/943007 external
https://bugzilla.suse.com/943010 external
https://bugzilla.suse.com/948086 external
https://bugzilla.suse.com/996040 external
https://www.suse.com/security/cve/CVE-2015-6564 external
https://bugzilla.suse.com/1074631 external
https://bugzilla.suse.com/1138392 external
https://bugzilla.suse.com/942850 external
https://bugzilla.suse.com/943006 external
https://bugzilla.suse.com/943007 external
https://bugzilla.suse.com/943010 external
https://bugzilla.suse.com/948086 external
https://bugzilla.suse.com/996040 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for openssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:2088.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:2088.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:2088",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_2088.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5600 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5600/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-6563 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-6563/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-6564 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-6564/"
      }
    ],
    "title": "security update for openssh",
    "tracking": {
      "current_release_date": "2026-09-20T10:55:22Z",
      "generator": {
        "date": "2015-11-19T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:2088",
      "initial_release_date": "2015-11-19T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-11-19T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:55:22Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
                "product": {
                  "name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
                  "product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6.1p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh@6.6.1p1-22.el7?arch=x86_64\u0026upstream=openssh-0:6.6.1p1-22.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssh-askpass@6.6.1p1-22.el7?arch=x86_64\u0026upstream=openssh-askpass-0:6.6.1p1-22.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6.1p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-clients@6.6.1p1-22.el7?arch=x86_64\u0026upstream=openssh-0:6.6.1p1-22.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssh-keycat@6.6.1p1-22.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssh-ldap@6.6.1p1-22.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-server-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-server-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openbsd:openssh:6.6.1p1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssh-server@6.6.1p1-22.el7?arch=x86_64\u0026upstream=openssh-0:6.6.1p1-22.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
                "product": {
                  "name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
                  "product_id": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssh-server-sysvinit@6.6.1p1-22.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
                "product": {
                  "name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
                  "product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
        },
        "product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
        },
        "product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5600",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5600"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
          "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5600",
          "url": "https://www.suse.com/security/cve/CVE-2015-5600"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1009988 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/1009988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074631 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/1074631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 938746 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/938746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943006 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/943006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943007 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/943007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943010 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/943010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943504 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/943504"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 945985 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/945985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 948086 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/948086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 954457 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/954457"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957883 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/957883"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2015-5600",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
            "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5600"
    },
    {
      "cve": "CVE-2015-6563",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-6563"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
          "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-6563",
          "url": "https://www.suse.com/security/cve/CVE-2015-6563"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074631 for CVE-2015-6563",
          "url": "https://bugzilla.suse.com/1074631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943006 for CVE-2015-6563",
          "url": "https://bugzilla.suse.com/943006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943007 for CVE-2015-6563",
          "url": "https://bugzilla.suse.com/943007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943010 for CVE-2015-6563",
          "url": "https://bugzilla.suse.com/943010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 948086 for CVE-2015-6563",
          "url": "https://bugzilla.suse.com/948086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2015-6563",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
            "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-6563"
    },
    {
      "cve": "CVE-2015-6564",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-6564"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
          "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
          "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-6564",
          "url": "https://www.suse.com/security/cve/CVE-2015-6564"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074631 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/1074631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 942850 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/942850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943006 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/943006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943007 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/943007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943010 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/943010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 948086 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/948086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2015-6564",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssh-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-clients-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-server-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
            "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
            "SUSE Liberty Linux 7:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-19T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-6564"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.