Red Hat Security AdvisoryRHSA-2016:0741
openssh security, bug fix, and enhancement update
Released 2016-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssh-5.3p1-117.el6, openssh-askpass-5.3p1-117.el6, openssh-clients-5.3p1-117.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssh-ldap-5.3p1-117.el6, pam_ssh_agent_auth-0.9.3-117.el6
- Red Hat Enterprise Linux HPC Node (v. 6) openssh-5.3p1-117.el6, openssh-clients-5.3p1-117.el6, openssh-server-5.3p1-117.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssh-askpass-5.3p1-117.el6, openssh-ldap-5.3p1-117.el6, pam_ssh_agent_auth-0.9.3-117.el6
- Red Hat Enterprise Linux Server (v. 6) openssh-5.3p1-117.el6, openssh-askpass-5.3p1-117.el6, openssh-clients-5.3p1-117.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssh-ldap-5.3p1-117.el6, pam_ssh_agent_auth-0.9.3-117.el6, pam_ssh_agent_auth-0.9.3-117.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssh-5.3p1-117.el6, openssh-askpass-5.3p1-117.el6, openssh-clients-5.3p1-117.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssh-ldap-5.3p1-117.el6, pam_ssh_agent_auth-0.9.3-117.el6
Fixes 4 records
Priority MEDIUM 64
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.13736 · Published 2017-04-11 · Partial fix CWE-287
Priority LOW 34
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00599 · Published 2015-08-24 · Partial fix CWE-416
Priority LOW 31
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging…
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00381 · Published 2015-08-24 · Partial fix CWE-20
Priority LOW 27
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to byp…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04519 · Published 2015-08-03 · Partial fix CWE-264
THREATIST.IORead the docs