CVE-2016-3115

Medium

Description

Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.

SeverityMedium

CVSS6.4

Exploit probability—

Product

Openbsd Openssh

PublishedMar 22, 2016

First seenMar 22, 2016

Weakness typeCWE-93CWE-93

How to fix

Vendor advisories

freebsd.org/security/advisories/FreeBSD-SA-16:14.openssh.asc
security.gentoo.org/glsa/201612-18

Affected products

Product	Affected versions	Fixed in
openbsd openssh	v ≤ 7.2	—
oracle vm_server	3.2	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.