PT-2015-3449

🗓️ 14 Aug 2015 00:00:00Reported by Positive TechnologiesType

OpenSSH prior to 7.0 has a use-after-free in monitor.c that may enable local privilege gain; upgrade to 7.0+ and restrict access.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2019-4674, CVE-2018-15473, CVE-2019-4675)	3 Feb 202018:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Open Source openssh affect IBM Security Identity Governance Appliance (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564 )	16 Jun 201821:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.5 is affected by a arbitrary code execution in OpenSSH server [CVE-2024-6387]	23 Jul 202421:10	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	6 May 202011:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect SAN Volume Controller and Storwize Family (CVE-2015-6563 CVE-2015-6564)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System Manager (FSM)	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSH for IBM i is vulnerable to an attacker executing arbitrary code due to a signal handler race condition. [CVE-2024-6387]	28 Aug 202422:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in OpenSSH	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm

Source	Link
github	www.github.com/zgzhang/cve-2024-6387-poc
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb
github	www.github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2016-6210
bdu	www.bdu.fstec.ru/vul/2023-07109
ubuntu	www.ubuntu.com/security/CVE-2015-5352
github	www.github.com/th3gokul/CVE-2024-6387
ubuntu	www.ubuntu.com/security/CVE-2015-5600
github	www.github.com/l0n3m4n/CVE-2024-6387
github	www.github.com/cpandya2909/CVE-2020-15778
oracle	www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

08 Jul 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17 - 8.1

CVSS 26.9

EPSS0.99506

SSVC