CVE-2015-6563
Fixed in a distro release EPSS <1%CVSS 6.4
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
Products: openbsd openssh, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssh | 1:6.9p1-1 |
| Debian 13 | openssh | 1:6.9p1-1 |
| Debian 14 | openssh | 1:6.9p1-1 |
| Debian 8 | openssh | 1:6.7p1-5+deb8u6 |
| Red Hat Enterprise Linux 6 | openssh | 0:5.3p1-117.el6 |
| Red Hat Enterprise Linux 6 | openssh-askpass | 0:5.3p1-117.el6 |
| Red Hat Enterprise Linux 6 | openssh-clients | 0:5.3p1-117.el6 |
| Red Hat Enterprise Linux 6 | openssh-debuginfo | 0:5.3p1-117.el6 |
| Red Hat Enterprise Linux 6 | openssh-ldap | 0:5.3p1-117.el6 |
| Red Hat Enterprise Linux 6 | openssh-server | 0:5.3p1-117.el6 |
| Red Hat Enterprise Linux 6 | pam_ssh_agent_auth | 0:0.9.3-117.el6 |
| Red Hat Enterprise Linux 7 | openssh | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-askpass | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-clients | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-debuginfo | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-keycat | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-ldap | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-server | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | openssh-server-sysvinit | 0:6.6.1p1-22.el7 |
| Red Hat Enterprise Linux 7 | pam_ssh_agent_auth | 0:0.9.3-9.22.el7 |
| SUSE Linux Enterprise Desktop 11 SP3 | openssh | 6.2p2-0.21.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | openssh-askpass-gnome | 6.2p2-0.21.3 |
| SUSE Linux Enterprise Desktop 11 SP4 | openssh | 6.6p1-13.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | openssh-askpass-gnome | 6.6p1-13.3 |
| SUSE Linux Enterprise Desktop 12 | openssh | 6.6p1-29.1 |
| SUSE Linux Enterprise Desktop 12 | openssh-askpass-gnome | 6.6p1-29.1 |
| SUSE Linux Enterprise Server 11 SP3 | openssh | 6.2p2-0.21.1 |
| SUSE Linux Enterprise Server 11 SP3 | openssh-askpass-gnome | 6.2p2-0.21.3 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssh | 6.2p2-0.21.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssh-askpass-gnome | 6.2p2-0.21.3 |
| SUSE Linux Enterprise Server 11 SP4 | openssh | 6.6p1-13.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssh-askpass-gnome | 6.6p1-13.3 |
| SUSE Linux Enterprise Server 12 | openssh | 6.6p1-29.1 |
| SUSE Linux Enterprise Server 12 | openssh-askpass-gnome | 6.6p1-29.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | openssh | 6.2p2-0.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | openssh-askpass-gnome | 6.2p2-0.21.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh | 6.6p1-13.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh-askpass-gnome | 6.6p1-13.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openssh | 6.6p1-29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openssh-askpass-gnome | 6.6p1-29.1 |
| Ubuntu 14.04 LTS | openssh | 1:6.6p1-2ubuntu2.2 |