CVE-2016-3115 Other in n/a

What is CVE-2016-3115?

CVE-2016-3115 is a medium-severity vulnerability in OpenSSH, published on 22 Mar 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.

Weakness: CWE-93

Which versions are affected by CVE-2016-3115?

It affects 2 products.

Products include OpenSSH, Oracle Vm Server.

How do I fix CVE-2016-3115?

Upgrade to a fixed version.

Is CVE-2016-3115 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-3115 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in OpenSSH

• CVE-2003-0786 Auth bypass in n/a Critical 10.0
• CVE-2003-0693 Memory corruption in n/a Critical 10.0
• CVE-2002-0640 Memory corruption in n/a Critical 10.0
• CVE-2001-0144 Integer overflow in n/a Critical 10.0
• CVE-2000-0999 Memory corruption in n/a Critical 10.0

All OpenSSH vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2016-3115, GHSA-p759-vw7c-cvg8, MGASA-2016-0108, UBUNTU-CVE-2016-3115.