Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-5600HistoryAug 03, 2015 - 1:59 a.m.
CVE-2015-5600
2015-08-0301:59:00
Debian Security Bug Tracker
security-tracker.debian.org
39
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
0.164 Low
EPSS
Percentile
95.9%
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssh | < 1:6.9p1-1 | openssh_1:6.9p1-1_all.deb |
| Debian | 11 | all | openssh | < 1:6.9p1-1 | openssh_1:6.9p1-1_all.deb |
| Debian | 10 | all | openssh | < 1:6.9p1-1 | openssh_1:6.9p1-1_all.deb |
| Debian | 999 | all | openssh | < 1:6.9p1-1 | openssh_1:6.9p1-1_all.deb |
| Debian | 13 | all | openssh | < 1:6.9p1-1 | openssh_1:6.9p1-1_all.deb |
Related
ibm
ibm
archlinux
archlinux
openssh: authentication limits bypass
2015-07-23 00:00:00
nessus
nessus
Fedora 22 : openssh-6.9p1-3.fc22 (2015-11981)
2015-07-31 00:00:00
FreeBSD : OpenSSH -- MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (5b74a5bc-348f-11e5-ba05-c80aa9043978)
2015-07-28 00:00:00
Debian DLA-288-2 : openssh regression update
2015-08-10 00:00:00
openvas
openvas
Fedora Update for openssh FEDORA-2015-11981
2015-07-31 00:00:00
Junos OpenSSH Restriction Bypass Vulnerability
2015-11-24 00:00:00
Fedora Update for openssh FEDORA-2015-12177
2015-08-01 00:00:00
debian
debian
[SECURITY] [DLA 288-2] openssh regression update
2015-09-30 03:37:43
[SECURITY] [DLA 288-1] openssh security update
2015-08-07 11:38:21
[SECURITY] [DLA 1500-1] openssh security update
2018-09-10 08:44:17
cloudfoundry
cloudfoundry
USN-2710-1 OpenSSH Vulnerabilities | Cloud Foundry
2015-09-08 00:00:00
veracode
veracode
Insecure Authentication
2019-01-15 09:10:32
fedora
fedora
[SECURITY] Fedora 22 Update: openssh-6.9p1-4.fc22
2015-07-31 07:53:13
[SECURITY] Fedora 22 Update: openssh-6.9p1-3.fc22
2015-07-30 13:56:25
[SECURITY] Fedora 22 Update: openssh-6.9p1-5.fc22
2015-08-19 08:15:54
f5
f5
SOL17113 - OpenSSH vulnerability CVE-2015-5600
2015-08-14 00:00:00
K17113 : OpenSSH vulnerability CVE-2015-5600
2015-09-29 00:00:00
cve
cve
CVE-2015-5600
2015-08-03 01:59:00
mageia
mageia
Updated openssh package fixes security vulnerability
2015-07-29 00:01:59
prion
prion
Design/Logic Flaw
2015-08-03 01:59:00
checkpoint_advisories
checkpoint_advisories
OpenSSH kbdint_next_device Policy Bypass (CVE-2015-5600)
2016-09-28 00:00:00
freebsd
freebsd
OpenSSH -- MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
2015-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2015-5600
2015-08-02 00:00:00
osv
osv
openssh - regression update
2015-09-30 00:00:00
openssh - security update
2015-09-30 00:00:00
openssh - security update
2018-09-10 00:00:00
securityvulns
securityvulns
OpenSSH resreictions bypass
2015-08-24 00:00:00
FreeBSD Security Advisory FreeBSD-SA-15:16.openssh [REVISED]
2015-08-02 00:00:00
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
2015-08-17 00:00:00
arista
arista
Security Advisory 0012
2015-08-20 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:16.openssh
2015-07-28 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2016-03-21 22:18:29
openssh, pam_ssh_agent_auth security update
2015-11-30 19:46:33
ubuntu
ubuntu
OpenSSH vulnerabilities
2015-08-14 00:00:00
OpenSSH regression
2015-08-18 00:00:00
oraclelinux
oraclelinux
openssh security update
2016-04-03 00:00:00
openssh security update
2016-03-21 00:00:00
openssh security, bug fix, and enhancement update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2016:0466) Moderate: openssh security update
2016-03-21 00:00:00
(RHSA-2015:2088) Moderate: openssh security, bug fix, and enhancement update
2015-11-19 14:41:38
amazon
amazon
Medium: openssh
2015-12-14 10:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2015-12-20 00:00:00
suse
suse
Security update for openssh (important)
2015-09-21 09:10:02
symantec
symantec
SA104 : OpenSSH Vulnerabilities
2015-12-08 08:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
CPU July 2018
2018-07-17 00:00:00
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
0.164 Low
EPSS
Percentile
95.9%
Related for DEBIANCVE:CVE-2015-5600