Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-5352
HistoryAug 02, 2015 - 12:00 a.m.

CVE-2015-5352

2015-08-0200:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

85.3%

The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9,
when ForwardX11Trusted mode is not used, lacks a check of the refusal
deadline for X connections, which makes it easier for remote attackers to
bypass intended access restrictions via a connection outside of the
permitted time window.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenssh< 1:5.9p1-5ubuntu1.6UNKNOWN
ubuntu14.04noarchopenssh< 1:6.6p1-2ubuntu2.2UNKNOWN
ubuntu15.04noarchopenssh< 1:6.7p1-5ubuntu1.2UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

85.3%