CVE-2015-8325

🗓️ 01 May 2016 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 2047 Views🌐 WEB

The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2 allows local users to gain privileges

Reporter	Title	Published	Views	Family All 187
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in openssh (CVE-2015-8325)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects Power Hardware Management Console (CVE-2015-8325)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSSH affects PowerKVM	18 Jun 201801:35	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from OpenSSL and OpenSSH affects IBM Netezza Host Management	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been fixed in products bundled with IBM Security Directory Suite 8.0.1	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by an OpenSSH vulnerability (CVE-2015-8325)	18 Jun 201801:35	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSSH affects IBM Security Network Protection (CVE-2015-8325)	16 Jun 201821:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH and OpenSSL affect GPFS for Windows V3.5	25 Jun 202116:46	–	ibm

NVD

Node

Node

Node

Source	Link
debian	www.debian.org/security/2016/dsa-3550
securitytracker	www.securitytracker.com/id/1036487
rhn	www.rhn.redhat.com/errata/RHSA-2016-2588.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2015-8325
security	www.security.netapp.com/advisory/ntap-20180628-0001/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
securityfocus	www.securityfocus.com/bid/86187
people	www.people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html
rhn	www.rhn.redhat.com/errata/RHSA-2017-0641.html
anongit	www.anongit.mindrot.org/openssh.git/commit/

Parameter	Position	Path	Description	CWE
LD_PRELOAD	path	/bin/login	Privilege escalation via crafted environment for /bin/login when UseLogin is enabled and PAM reads .pam_environment files in user home directories.	CWE-264, CWE-1262

17 Jun 2026 00:34Current

7.5High risk

Vulners AI Score7.5

CVSS 27.2

CVSS 37.8

CVSS 3.17.8

EPSS0.00627

SSVC