ROS-20261027-73-0011

The vulnerability in the kbdintnextdevice function within the sshd service of the OpenSSH cryptographic suite is related to access control flaws in handling the oKbdInteractiveDevices parameter, which contains a list of methods for authenticating via an interactive keyboard. Exploitation of this...

CVE-2015-5600

The kbdintnextdevice function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service CPU consumptio...