CVE-2016-3115
MediumSummary
Wielokrotne podatności na wstrzykiwanie CRLF w pliku session.c w sshd w OpenSSH przed wersją 7.2p2 pozwalają zdalnym uwierzytelnionym użytkownikom na obejście zamierzonych ograniczeń dotyczących poleceń powłoki za pomocą spreparowanych danych przekazywania X11, związanych z funkcjami (1) do_authenticated1 i (2) session_x11_req.
Risk Assessment
Podatność ta może prowadzić do nieautoryzowanego dostępu do powłoki systemowej, co stwarza poważne zagrożenie dla bezpieczeństwa organizacji. Umożliwia to zdalnym użytkownikom wykonanie nieautoryzowanych poleceń na serwerze.
Recommendation
Zaleca się aktualizację OpenSSH do wersji 7.2p2 lub nowszej, aby usunąć te podatności. Dodatkowo, warto przeprowadzić audyt konfiguracji i monitorować logi sesji użytkowników.
Related vulnerabilities
- CVE-2026-124917Critical
Sandbox escape vulnerability due to use-after-free in the Widget: Gtk component of Firefox. It may allow bypassing process isolation. The vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
- CVE-2026-124903Critical
A sandbox escape due to a use-after-free exists in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
- CVE-2026-124900Critical
A use-after-free in the DOM: Service Workers component of Firefox allows a sandbox escape. The vulnerability was fixed in Firefox 160.
- CVE-2026-124864Critical
Use-after-free vulnerability in the DOM: Service Workers component of Firefox enabling a sandbox escape. It may allow bypassing browser isolation mechanisms. Fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
- CVE-2026-124861Critical
Use-after-free vulnerability in the Audio/Video: cubeb component of Firefox enabling a sandbox escape. It may allow bypassing browser isolation mechanisms. Fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
- CVE-2026-124859Critical
Sandbox escape in the Storage: Cache API component of Firefox caused by incorrect boundary conditions. It may allow bypassing browser isolation mechanisms. Fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
- CVE-2026-124853Critical
A sandbox escape vulnerability due to incorrect boundary conditions exists in the Graphics: Text component of Firefox. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
- CVE-2026-119446Critical
A Session Fixation vulnerability in the CLI login flow in nerves_hub_web allows an unauthenticated attacker to obtain an API token for another user's account via a crafted login link. The confirmation code is only displayed and never compared, so it cannot prove that the confirming person is the one who started the login.
- CVE-2026-60043Critical
An unauthenticated remote attacker can perform an XSS attack on a logged-in backend user, allowing execution of multiple critical system actions such as shutting down the server or restoring an uploaded backup.
- CVE-2026-13312Critical
The described vulnerability could allow an attacker to compromise a system. Technical details are not provided in the description.
Original NVD description (English source)
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS