usn-2966-1
Vulnerability from osv_ubuntu
Published
2016-05-09 17:04
Modified
2026-06-01 07:03
Summary
openssh vulnerabilities
Details
Shayan Sadigh discovered that OpenSSH incorrectly handled environment files when the UseLogin feature is enabled. A local attacker could use this issue to gain privileges. (CVE-2015-8325)
Ben Hawkes discovered that OpenSSH incorrectly handled certain network traffic. A remote attacker could possibly use this issue to cause OpenSSH to crash, resulting in a denial of service. This issue only applied to Ubuntu 15.10. (CVE-2016-1907)
Thomas Hoger discovered that OpenSSH incorrectly handled untrusted X11 forwarding when the SECURITY extension is disabled. A connection configured as being untrusted could get switched to trusted in certain scenarios, contrary to expectations. (CVE-2016-1908)
It was discovered that OpenSSH incorrectly handled certain X11 forwarding data. A remote authenticated attacker could possibly use this issue to bypass certain intended command restrictions. (CVE-2016-3115)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2015-8325",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-1908",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-3115",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:14.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:6.6p1-2ubuntu2.7"
},
{
"binary_name": "openssh-server",
"binary_version": "1:6.6p1-2ubuntu2.7"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:6.6p1-2ubuntu2.7"
},
{
"binary_name": "ssh",
"binary_version": "1:6.6p1-2ubuntu2.7"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:6.6p1-2ubuntu2.7"
},
{
"binary_name": "ssh-krb5",
"binary_version": "1:6.6p1-2ubuntu2.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:14.04:LTS",
"name": "openssh",
"purl": "pkg:deb/ubuntu/openssh@1:6.6p1-2ubuntu2.7?arch=source\u0026distro=trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:6.6p1-2ubuntu2.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:6.2p2-6",
"1:6.2p2-6ubuntu1",
"1:6.4p1-1",
"1:6.4p1-2",
"1:6.5p1-1",
"1:6.5p1-2",
"1:6.5p1-3",
"1:6.5p1-4",
"1:6.5p1-6",
"1:6.6p1-1",
"1:6.6p1-2",
"1:6.6p1-2ubuntu1",
"1:6.6p1-2ubuntu2",
"1:6.6p1-2ubuntu2.2",
"1:6.6p1-2ubuntu2.3",
"1:6.6p1-2ubuntu2.4",
"1:6.6p1-2ubuntu2.6"
]
}
],
"aliases": [],
"details": "Shayan Sadigh discovered that OpenSSH incorrectly handled environment files\nwhen the UseLogin feature is enabled. A local attacker could use this issue\nto gain privileges. (CVE-2015-8325)\n\nBen Hawkes discovered that OpenSSH incorrectly handled certain network\ntraffic. A remote attacker could possibly use this issue to cause OpenSSH\nto crash, resulting in a denial of service. This issue only applied to\nUbuntu 15.10. (CVE-2016-1907)\n\nThomas Hoger discovered that OpenSSH incorrectly handled untrusted X11\nforwarding when the SECURITY extension is disabled. A connection configured\nas being untrusted could get switched to trusted in certain scenarios,\ncontrary to expectations. (CVE-2016-1908)\n\nIt was discovered that OpenSSH incorrectly handled certain X11 forwarding\ndata. A remote authenticated attacker could possibly use this issue to\nbypass certain intended command restrictions. (CVE-2016-3115)\n",
"id": "USN-2966-1",
"modified": "2026-06-01T07:03:46Z",
"published": "2016-05-09T17:04:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-2966-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2015-8325"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-1907"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-1908"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-3115"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "openssh vulnerabilities",
"upstream": [
"UBUNTU-CVE-2015-8325",
"UBUNTU-CVE-2016-1907",
"UBUNTU-CVE-2016-1908",
"UBUNTU-CVE-2016-3115"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…