Red Hat Security AdvisoryRHSA-2015:2088
openssh security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssh-6.6.1p1-22.el7, openssh-askpass-6.6.1p1-22.el7, openssh-clients-6.6.1p1-22.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) openssh-ldap-6.6.1p1-22.el7, openssh-server-sysvinit-6.6.1p1-22.el7, pam_ssh_agent_auth-0.9.3-9.22.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openssh-6.6.1p1-22.el7, openssh-clients-6.6.1p1-22.el7, openssh-keycat-6.6.1p1-22.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssh-askpass-6.6.1p1-22.el7, openssh-ldap-6.6.1p1-22.el7, openssh-server-sysvinit-6.6.1p1-22.el7 +1
- Red Hat Enterprise Linux Server (v. 7) openssh-6.6.1p1-22.el7, openssh-askpass-6.6.1p1-22.el7, openssh-clients-6.6.1p1-22.el7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssh-askpass-6.6.1p1-22.el7, openssh-ldap-6.6.1p1-22.el7, openssh-server-sysvinit-6.6.1p1-22.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) openssh-6.6.1p1-22.el7, openssh-askpass-6.6.1p1-22.el7, openssh-clients-6.6.1p1-22.el7 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssh-ldap-6.6.1p1-22.el7, openssh-server-sysvinit-6.6.1p1-22.el7, pam_ssh_agent_auth-0.9.3-9.22.el7
Fixes 3 records
Priority MEDIUM 49
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attac…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.09377 · Published 2015-08-03 · Partial fix CWE-400
Priority LOW 34
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00599 · Published 2015-08-24 · Partial fix CWE-416
Priority LOW 31
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging…
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00381 · Published 2015-08-24 · Partial fix CWE-20
THREATIST.IORead the docs