CVE-2015-5600
Summary
| CVE | CVE-2015-5600 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-08-03 01:59:00 UTC |
| Updated | 2022-12-13 12:15:00 UTC |
| Description | The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| OpenSSH: Multiple vulnerabilities (GLSA 201512-04) — Gentoo Security | GENTOO | security.gentoo.org | |
| CVE-2015-5600 OpenSSH MaxAuthTries Bypass Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| [SECURITY] [DLA 1500-1] openssh security update | MLIST | lists.debian.org | |
| src/usr.bin/ssh/auth2-chall.c - diff - 1.43 | CONFIRM | cvsweb.openbsd.org | |
| Oracle Critical Patch Update - July 2016 | CONFIRM | www.oracle.com | |
| HPE Support document - HPE Support Center | CONFIRM | h20566.www2.hpe.com | |
| Oracle July 2016 Critical Patch Update Multiple Vulnerabilities | BID | www.securityfocus.com | |
| McAfee Security Bulletin: Network Security Virtual Platform update resolves OpenSSH vulnerability that bypasses authentication restrictions defined by MaxAuthTries | CONFIRM | kc.mcafee.com | |
| Arista - Security Advisory 0012 | MISC | www.arista.com | |
| USN-2710-2: OpenSSH regression | Ubuntu | UBUNTU | www.ubuntu.com | |
| Document Display | HPE Support Center | CONFIRM | h20566.www2.hpe.com | |
| OpenSSH 'KbdInteractiveDevices' Lets Remote Users Bypass Security Restrictions on the Target System - SecurityTracker | SECTRACK | www.securitytracker.com | |
| About the security content of OS X Yosemite v10.10.5 and Security Update 2015-006 - Apple Support | CONFIRM | support.apple.com | |
| CPU July 2018 | CONFIRM | www.oracle.com | |
| Oracle Solaris Third Party Bulletin - October 2015 | CONFIRM | www.oracle.com | |
| Full Disclosure: OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass) | FULLDISC | seclists.org | Exploit |
| Oracle Linux Bulletin - April 2016 | CONFIRM | www.oracle.com | |
| Oracle VM Server for x86 Bulletin - July 2016 | CONFIRM | www.oracle.com | |
| [security-announce] SUSE-SU-2015:1581-1: important: Security update for | SUSE | lists.opensuse.org | |
| RETIRED: Oracle Integrated Lights Out Manager CVE-2015-5600 Remote Security Vulnerability | BID | www.securityfocus.com | |
| Oracle Linux Bulletin - October 2015 | CONFIRM | www.oracle.com | |
| cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf | CONFIRM | cert-portal.siemens.com | |
| Document Display | HPE Support Center | CONFIRM | h20564.www2.hpe.com | |
| McAfee KnowledgeBase - Intel Security - Security Bulletin: Firewall Enterprise update fixes OpenSSH CVE-2015-5600 and CVE-2015-6564 vulnerabilities | CONFIRM | kc.mcafee.com | |
| APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 | APPLE | lists.apple.com | |
| USN-2710-1: OpenSSH vulnerabilities | Ubuntu | UBUNTU | www.ubuntu.com | |
| CVS log for src/usr.bin/ssh/auth2-chall.c | CONFIRM | cvsweb.openbsd.org | |
| [SECURITY] Fedora 21 Update: openssh-6.6.1p1-16.fc21 | FEDORA | lists.fedoraproject.org | |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | |
| [SECURITY] Fedora 22 Update: openssh-6.9p1-3.fc22 | FEDORA | lists.fedoraproject.org | |
| Juniper Networks - 2015-10 Security Bulletin: Junos: OpenSSH brute force keyboard interactive MaxAuthTries bypass (CVE-2015-5600) | CONFIRM | kb.juniper.net | |
| OpenSSH Login Handling Security Bypass Weakness | BID | www.securityfocus.com | |
| oss-security - Re: CVE Request for OpenSSH vulnerability - authentication limits bypass | MLIST | openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 591280 Siemens SCALANCE X-200RNA Switch Devices Denial of Service (DoS) Multiple Vulnerabilities (ICSA-22-349-21, SSA-412672)