Vulnerability Details : CVE-2015-6563
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
Vulnerability category: Input validation
Exploit prediction scoring system (EPSS) score for CVE-2015-6563
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2015-6563
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
1.9
|
LOW | AV:L/AC:M/Au:N/C:N/I:P/A:N |
3.4
|
2.9
|
[email protected] |
CWE ids for CVE-2015-6563
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: [email protected] (Primary)
References for CVE-2015-6563
-
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-766
-
http://www.openssh.com/txt/release-7.0
Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0741.html
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
- http://seclists.org/fulldisclosure/2015/Aug/54
- https://support.apple.com/HT205375
- https://security.gentoo.org/glsa/201512-04
- http://www.securityfocus.com/bid/76317
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
-
https://security.netapp.com/advisory/ntap-20180201-0002/
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- http://www.openwall.com/lists/oss-security/2015/08/22/1
- https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
-
https://github.com/openssh/openssh-portable/commit/d4697fe9a28dab7255c60433e4dd23cf7fce8a8b
Products affected by CVE-2015-6563
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*