Lucene search
Gentoo FoundationMGASA-2015-0295HistoryJul 29, 2015 - 12:01 a.m.
Updated openssh package fixes security vulnerability
2015-07-2900:01:59
Gentoo Foundation
advisories.mageia.org
34
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
EPSS
0.363
Percentile
97.2%
The OpenSSH server, when keyboard-interactive challenge response authentication is enabled and PAM is being used (the default configuration in Mageia), can be tricked into allowing more password attempts than the MaxAuthTries setting would normally allow in one connection, which can aid an attacker in brute-force password guessing (CVE-2015-5600).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | openssh | < 6.2p2-3.4 | openssh-6.2p2-3.4.mga4 |
| Mageia | 5 | noarch | openssh | < 6.6p1-5.3 | openssh-6.6p1-5.3.mga5 |
Related
nessus
nessus
FreeBSD : OpenSSH -- MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (5b74a5bc-348f-11e5-ba05-c80aa9043978)
2015-07-28 00:00:00
Fedora 22 : openssh-6.9p1-3.fc22 (2015-11981)
2015-07-31 00:00:00
Debian DLA-288-2 : openssh regression update
2015-08-10 00:00:00
ibm
ibm
archlinux
archlinux
openssh: authentication limits bypass
2015-07-23 00:00:00
cvelist
cvelist
CVE-2015-5600
2015-08-03 00:00:00
debian
debian
[SECURITY] [DLA 288-2] openssh regression update
2015-09-30 03:37:43
[SECURITY] [DLA 288-1] openssh security update
2015-08-07 11:38:21
[SECURITY] [DLA 1500-1] openssh security update
2018-09-10 08:44:17
openvas
openvas
Fedora Update for openssh FEDORA-2015-11981
2015-07-31 00:00:00
Juniper Networks Junos OS OpenSSH Restriction Bypass Vulnerability
2015-11-24 00:00:00
Fedora Update for openssh FEDORA-2015-13520
2015-08-20 00:00:00
veracode
veracode
Insecure Authentication
2019-01-15 09:10:32
cloudfoundry
cloudfoundry
USN-2710-1 OpenSSH Vulnerabilities | Cloud Foundry
2015-09-08 00:00:00
securityvulns
securityvulns
OpenSSH resreictions bypass
2015-08-24 00:00:00
FreeBSD Security Advisory FreeBSD-SA-15:16.openssh [REVISED]
2015-08-02 00:00:00
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
2015-08-17 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: openssh-6.9p1-3.fc22
2015-07-30 13:56:25
[SECURITY] Fedora 22 Update: openssh-6.9p1-5.fc22
2015-08-19 08:15:54
[SECURITY] Fedora 22 Update: openssh-6.9p1-4.fc22
2015-07-31 07:53:13
f5
f5
K17113 : OpenSSH vulnerability CVE-2015-5600
2015-09-29 00:00:00
SOL17113 - OpenSSH vulnerability CVE-2015-5600
2015-08-14 00:00:00
nvd
nvd
CVE-2015-5600
2015-08-03 01:59:03
osv
osv
openssh - regression update
2015-09-30 00:00:00
openssh - security update
2015-09-30 00:00:00
openssh - security update
2018-09-10 00:00:00
arista
arista
Security Advisory 0012
2015-08-20 00:00:00
freebsd
freebsd
OpenSSH -- MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
2015-07-21 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSH kbdint_next_device Policy Bypass (CVE-2015-5600)
2016-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2015-5600
2015-08-02 00:00:00
debiancve
debiancve
CVE-2015-5600
2015-08-03 01:59:03
prion
prion
Design/Logic Flaw
2015-08-03 01:59:00
cve
cve
CVE-2015-5600
2015-08-03 01:59:03
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:16.openssh
2015-07-28 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2016-03-21 22:18:29
openssh, pam_ssh_agent_auth security update
2015-11-30 19:46:33
ubuntu
ubuntu
OpenSSH regression
2015-08-18 00:00:00
OpenSSH vulnerabilities
2015-08-14 00:00:00
oraclelinux
oraclelinux
openssh security update
2016-04-03 00:00:00
openssh security update
2016-03-21 00:00:00
openssh security, bug fix, and enhancement update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2016:0466) Moderate: openssh security update
2016-03-21 00:00:00
(RHSA-2015:2088) Moderate: openssh security, bug fix, and enhancement update
2015-11-19 14:41:38
amazon
amazon
Medium: openssh
2015-12-14 10:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2015-12-20 00:00:00
suse
suse
Security update for openssh (important)
2015-09-21 09:10:02
symantec
symantec
SA104 : OpenSSH Vulnerabilities
2015-12-08 08:00:00
githubexploit
githubexploit
Exploit for Race Condition in Openbsd Openssh
2024-07-01 20:45:53
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
CPU July 2018
2018-07-17 00:00:00
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
EPSS
0.363
Percentile
97.2%
Related for MGASA-2015-0295