OpenSSH: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2016-6515 Public exploit EPSS 59%

  The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password …

  openssh openssh openssh Debian Ubuntu Alpine
  Aug 7, 2016

Revision history

1. 2024-05-07 #23

   Neue Updates von Dell aufgenommen

2. 2023-02-21 #22

   Neue Updates von IBM aufgenommen

3. 2019-03-27 #21

   CVSS Vektor korrigiert

4. 2019-01-30 #20

   Neue Updates von EMC aufgenommen

5. 2018-06-13 #19

   New remediations available

6. 2017-11-30 #18

   New remediations available

7. 2017-08-07 #17

   Added references

8. 2017-08-01 #16

   New remediations available

9. 2017-05-02 #15

   New remediations available

10. 2017-01-11 #14

    New remediations available

11. 2016-12-13 #13

    New remediations available

12. 2016-10-25 #11

    New remediations available

13. 2016-10-25 #12

    Version nicht vorhanden

14. 2016-10-19 #9

    New remediations available

15. 2016-10-19 #10

    Version nicht vorhanden

16. 2016-09-27 #8

    New remediations available

17. 2016-09-12 #6

    New remediations available

18. 2016-09-12 #7

    Version nicht vorhanden

19. 2016-08-15 #4

    New remediations available

20. 2016-08-15 #5

    Version nicht vorhanden

21. 2016-08-01 #1

    Initial Release

22. 2016-08-01 #2

    Version nicht vorhanden

23. 2016-08-01 #3

    Version nicht vorhanden

References

• OpenSSH 7.3 release notes vom 2016-08-01
  http://www.openssh.com/txt/release-7.3
• Ubuntu Security Notice USN-3061-1 vom 2016-08-15
  http://www.ubuntu.com/usn/usn-3061-1/
• SUSE Security Update SUSE-SU-2016:2281-1 vom 2016-09-12
  https://www.suse.com/support/update/announcement/2016/suse-su-20162281-1.html
• SUSE Security Update SUSE-SU-2016:2280-1 vom 2016-09-12
  https://www.suse.com/support/update/announcement/2016/suse-su-20162280-1.html
• SUSE Security Update SUSE-SU-2016:2388-1 vom 2016-09-27
  https://www.suse.com/support/update/announcement/2016/suse-su-20162388-1.html
• F5 Security Advisory sol31510510 vom 2016-10-19
  https://support.f5.com/kb/en-us/solutions/public/k/31/sol31510510.html?ref=rss
• SUSE Security Update SUSE-SU-2016:2555-1 vom 2016-10-25
  https://www.suse.com/support/update/announcement/2016/suse-su-20162555-1.html
• Exploit Database 40888 vom 2016-12-07
  https://www.exploit-db.com/exploits/40888/?rss
• BlueCoat Security Advisory SA136
  https://bto.bluecoat.com/security-advisory/sa136
• Juniper Security Advisory JSA10770 vom 2017-01-12
  http://www.auscert.org.au/render.html?it=42842
• Brocade Security Advisory BSA-2017-247 vom 2017-05-03
  http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-247.htm
• Red Hat Security Advisory: RHSA-2017:2029
  https://access.redhat.com/errata/RHSA-2017:2029
• The FreeBSD Project Security Advisory FreeBSD-SA-17:06.openssh vom 2017-08-10
  https://www.freebsd.org/security/advisories/FreeBSD-SA-17:06.openssh.asc
• NetApp Security Advisory NTAP-20171130-0003 vom 2017-12-01
  https://security.netapp.com/advisory/ntap-20171130-0003/
• McAfee Security Bulletin: SB10239
  https://kc.mcafee.com/corporate/index?page=content&id=SB10239
• Dell/EMC Knowledge Base Article: 000529947
  https://support.emc.com/kb/529947
• IBM Security Bulletin 650935 vom 2023-02-22
  https://www.ibm.com/support/pages/node/650935
• Dell Security Advisory DSA-2024-198 vom 2024-05-08
  https://www.dell.com/support/kbdoc/000224827/dsa-2024-=