Wind River Support Network

HomeDefectsLIN5-21308
Fixed

LIN5-21308 : Security Advisory - openssh - CVE-2016-3115

Created: Mar 29, 2016    Updated: May 29, 2018
Resolved Date: Apr 10, 2016
Found In Version: 5.0.1.35
Fix Version: 5.0.1.36
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.<a href=https://cwe.mitre.org/data/definitions/93.html>CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3115

Other Downloads


Live chat
Online