CVE-2016-3115

🗓️ 22 Mar 2016 10:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1223 Views

CVE-2016-3115 CRLF injection vulnerabilities in OpenSS

Reporter	Title	Published	Views	Family All 205
0day.today	DropBearSSHD 2015.71 - Command Injection	3 Mar 201600:00	–	zdt
0day.today	OpenSSH 7.2p1 - Authenticated xauth Command Injection	16 Mar 201600:00	–	zdt
0day.today	BlackStratus LOGStorm 4.5.1.35/4.5.1.96 - Remote Root Exploit	5 Dec 201600:00	–	zdt
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System Manager (FSM)	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager for Web is affected by vulnerabilities in OpenSSH (CVE-2016-3115, CVE-2016-1908)	16 Jun 201821:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM i (CVE-2016-1907, CVE-2016-1908, CVE-2016-3115)	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager for Mobile is affected by vulnerabilities in OpenSSH (CVE-2016-3115, CVE-2016-1908)	16 Jun 201821:44	–	ibm
IBM Security Bulletins	Security Bulletin: A Vulnerability in OpenSSH and Multiple Vulnerabilities in OpenSSL affect IBM GPFS V3.5 for Windows	25 Jun 202116:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect Power Hardware Management Console	23 Sep 202101:31	–	ibm
ALT Linux	Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.2	14 Mar 201600:00	–	altlinux

NVD

Node

Node

Source	Link
cvsweb	www.cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff
packetstormsecurity	www.packetstormsecurity.com/files/136234/OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html
seclists	www.seclists.org/fulldisclosure/2016/Mar/46
securitytracker	www.securitytracker.com/id/1035249
securityfocus	www.securityfocus.com/bid/84314
openssh	www.openssh.com/txt/x11fwd.adv
oracle	www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
rhn	www.rhn.redhat.com/errata/RHSA-2016-0466.html
lists	www.lists.debian.org/debian-lts-announce/2018/09/msg00010.html
github	www.github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115

17 Jun 2026 00:44Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.5

CVSS 36.4

CVSS 3.16.4

EPSS0.37016

SSVC