Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-3115 →
DEBIAN-CVE-2016-3115
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
openssh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-1"}]}]
Debian:13
openssh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-1"}]}]
Debian:14
openssh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-1"}]}]
Références
- advisory security-tracker.debian.org