Lucene search
Gentoo FoundationMGASA-2015-0295HistoryJul 29, 2015 - 12:01 a.m.
Updated openssh package fixes security vulnerability
2015-07-2900:01:59
Gentoo Foundation
advisories.mageia.org
17
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
0.164 Low
EPSS
Percentile
95.9%
The OpenSSH server, when keyboard-interactive challenge response authentication is enabled and PAM is being used (the default configuration in Mageia), can be tricked into allowing more password attempts than the MaxAuthTries setting would normally allow in one connection, which can aid an attacker in brute-force password guessing (CVE-2015-5600).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | openssh | < 6.2p2-3.4 | openssh-6.2p2-3.4.mga4 |
| Mageia | 5 | noarch | openssh | < 6.6p1-5.3 | openssh-6.6p1-5.3.mga5 |
Related
nessus
nessus
FreeBSD : OpenSSH -- MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (5b74a5bc-348f-11e5-ba05-c80aa9043978)
2015-07-28 00:00:00
Fedora 22 : openssh-6.9p1-3.fc22 (2015-11981)
2015-07-31 00:00:00
Debian DLA-288-2 : openssh regression update
2015-08-10 00:00:00
ibm
ibm
archlinux
archlinux
openssh: authentication limits bypass
2015-07-23 00:00:00
debian
debian
[SECURITY] [DLA 288-2] openssh regression update
2015-09-30 03:37:43
[SECURITY] [DLA 288-1] openssh security update
2015-08-07 11:38:21
[SECURITY] [DLA 1500-1] openssh security update
2018-09-10 08:44:17
veracode
veracode
Insecure Authentication
2019-01-15 09:10:32
cloudfoundry
cloudfoundry
USN-2710-1 OpenSSH Vulnerabilities | Cloud Foundry
2015-09-08 00:00:00
openvas
openvas
Juniper Networks Junos OS OpenSSH Restriction Bypass Vulnerability
2015-11-24 00:00:00
Fedora Update for openssh FEDORA-2015-11981
2015-07-31 00:00:00
Fedora Update for openssh FEDORA-2015-12177
2015-08-01 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: openssh-6.9p1-4.fc22
2015-07-31 07:53:13
[SECURITY] Fedora 22 Update: openssh-6.9p1-5.fc22
2015-08-19 08:15:54
[SECURITY] Fedora 22 Update: openssh-6.9p1-3.fc22
2015-07-30 13:56:25
f5
f5
SOL17113 - OpenSSH vulnerability CVE-2015-5600
2015-08-14 00:00:00
K17113 : OpenSSH vulnerability CVE-2015-5600
2015-09-29 00:00:00
prion
prion
Design/Logic Flaw
2015-08-03 01:59:00
debiancve
debiancve
CVE-2015-5600
2015-08-03 01:59:00
cve
cve
CVE-2015-5600
2015-08-03 01:59:00
checkpoint_advisories
checkpoint_advisories
OpenSSH kbdint_next_device Policy Bypass (CVE-2015-5600)
2016-09-28 00:00:00
freebsd
freebsd
OpenSSH -- MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
2015-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2015-5600
2015-08-02 00:00:00
osv
osv
openssh - regression update
2015-09-30 00:00:00
openssh - security update
2015-09-30 00:00:00
openssh - security update
2018-09-10 00:00:00
securityvulns
securityvulns
OpenSSH resreictions bypass
2015-08-24 00:00:00
FreeBSD Security Advisory FreeBSD-SA-15:16.openssh [REVISED]
2015-08-02 00:00:00
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
2015-08-17 00:00:00
arista
arista
Security Advisory 0012
2015-08-20 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:16.openssh
2015-07-28 00:00:00
ubuntu
ubuntu
OpenSSH vulnerabilities
2015-08-14 00:00:00
OpenSSH regression
2015-08-18 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2016-03-21 22:18:29
openssh, pam_ssh_agent_auth security update
2015-11-30 19:46:33
oraclelinux
oraclelinux
openssh security update
2016-04-03 00:00:00
openssh security update
2016-03-21 00:00:00
openssh security, bug fix, and enhancement update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2016:0466) Moderate: openssh security update
2016-03-21 00:00:00
(RHSA-2015:2088) Moderate: openssh security, bug fix, and enhancement update
2015-11-19 14:41:38
amazon
amazon
Medium: openssh
2015-12-14 10:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2015-12-20 00:00:00
suse
suse
Security update for openssh (important)
2015-09-21 09:10:02
symantec
symantec
SA104 : OpenSSH Vulnerabilities
2015-12-08 08:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
CPU July 2018
2018-07-17 00:00:00
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
0.164 Low
EPSS
Percentile
95.9%
Related for MGASA-2015-0295