K93532943: SSHD session.c vulnerability CVE-2016-3115

🗓️ 21 Feb 2023 19:52:38Reported by f5Type

f5🔗 my.f5.com👁 47 Views

SSHD session.c vulnerability CVE-2016-3115 Multiple CRLF injection vulnerabilities in sshd in OpenSSH before 7.2p

Reporter	Title	Published	Views	Family All 205
0day.today	DropBearSSHD 2015.71 - Command Injection	3 Mar 201600:00	–	zdt
0day.today	OpenSSH 7.2p1 - Authenticated xauth Command Injection	16 Mar 201600:00	–	zdt
0day.today	BlackStratus LOGStorm 4.5.1.35/4.5.1.96 - Remote Root Exploit	5 Dec 201600:00	–	zdt
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System Manager (FSM)	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager for Web is affected by vulnerabilities in OpenSSH (CVE-2016-3115, CVE-2016-1908)	16 Jun 201821:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM i (CVE-2016-1907, CVE-2016-1908, CVE-2016-3115)	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager for Mobile is affected by vulnerabilities in OpenSSH (CVE-2016-3115, CVE-2016-1908)	16 Jun 201821:44	–	ibm
IBM Security Bulletins	Security Bulletin: A Vulnerability in OpenSSH and Multiple Vulnerabilities in OpenSSL affect IBM GPFS V3.5 for Windows	25 Jun 202116:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect Power Hardware Management Console	23 Sep 202101:31	–	ibm
ALT Linux	Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.2	14 Mar 201600:00	–	altlinux

Vulners

Node

f5 big-ip_ltmRange12.0.0–12.1.2

OR

f5 big-ip_ltmRange11.4.0–11.6.3

OR

f5 big-ip_ltmMatch11.2.1

OR

f5 big-ip_ltmRange10.2.1–10.2.4

OR

f5 big-ip_aamRange12.0.0–12.1.2

OR

f5 big-ip_aamRange11.4.0–11.6.3

OR

f5 big-ip_afmRange12.0.0–12.1.2

OR

f5 big-ip_afmRange11.4.0–11.6.3

OR

f5 big-ip_analyticsRange12.0.0–12.1.2

OR

f5 big-ip_analyticsRange11.4.0–11.6.3

OR

f5 big-ip_apmRange12.0.0–12.1.2

OR

f5 big-ip_apmRange11.4.0–11.6.3

OR

f5 big-ip_apmMatch11.2.1

OR

f5 big-ip_apmRange10.2.1–10.2.4

OR

f5 big-ip_asmRange12.0.0–12.1.2

OR

f5 big-ip_asmRange11.4.0–11.6.3

OR

f5 big-ip_asmMatch11.2.1

OR

f5 big-ip_asmRange10.2.1–10.2.4

OR

f5 big-ip_dnsRange12.0.0–12.1.2

OR

f5 big-ip_edge_gatewayMatch11.2.1

OR

f5 big-ip_edge_gatewayRange10.2.1–10.2.4

OR

f5 big-ip_gtmRange11.4.0–11.6.3

OR

f5 big-ip_gtmMatch11.2.1

OR

f5 big-ip_gtmRange10.2.1–10.2.4

OR

f5 big-ip_link_controllerRange12.0.0–12.1.2

OR

f5 big-ip_link_controllerRange11.4.0–11.6.3

OR

f5 big-ip_link_controllerMatch11.2.1

OR

f5 big-ip_link_controllerRange10.2.1–10.2.4

OR

f5 big-ip_pemRange12.0.0–12.1.2

OR

f5 big-ip_pemRange11.4.0–11.6.3

OR

f5 big-ip_psmRange11.4.0–11.4.1

OR

f5 big-ip_psmMatch11.2.1

OR

f5 big-ip_psmRange10.2.1–10.2.4

OR

f5 big-ip_webacceleratorMatch11.2.1

OR

f5 big-ip_webacceleratorRange10.2.1–10.2.4

OR

f5 big-ip_womMatch11.2.1

OR

f5 big-ip_womRange10.2.1–10.2.4

OR

f5 enterprise_managerRange3.0.0–3.1.1

OR

f5 big-iq_cloudRange4.0.0–4.5.0

OR

f5 big-iq_deviceRange4.2.0–4.5.0

OR

f5 big-iq_securityRange4.0.0–4.5.0

OR

f5 big-iq_adcMatch4.5.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 big-iq_cloudMatch1.0.0

OR

f5 big-iq_orchestrationMatch1.0.0

OR

f5 linerateRange2.5.0–2.6.1

OR

f5 traffix_sdcRange4.0.0–4.4.0

OR

f5 traffix_sdcRange3.3.2–3.5.1

21 Feb 2023 19:52Current

7.5High risk

Vulners AI Score7.5

CVSS 25.5

CVSS 36.4

CVSS 3.16.4

EPSS0.37016

SSVC

crlf injection vulnerability sshd openssh before 7.2p2 remote users arbitrary files