The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssh | Aug 30, 2017 | Aug 2, 2015 |
| Apple Osx Apache | — | Apply OS X security update 2015-006Upgrade macOS to the latest version | Aug 28, 2015 | Aug 2, 2015 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Mar 29, 2016 | Aug 2, 2015 |
| Centos_linux | — | Upgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade opensshUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-ldap | Jul 6, 2016 | Aug 2, 2015 |
| Debian | — | Upgrade openssh | Jul 30, 2024 | Aug 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 29, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portable | Dec 10, 2025 | Jul 27, 2015 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Aug 2, 2015 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Aug 5, 2015 | Aug 3, 2015 |
| Oracle Solaris | — | Upgrade service/network/ssh to version 0.5.11-0.175.3.1.0.2.0 on Solaris 11.3Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade service/network/ssh to version 0.5.11-0.175.2.15.0.3.2 on Solaris 11.2 | May 29, 2017 | Aug 2, 2015 |
| Oracle_linux | — | Upgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-server-sysvinitUpgrade opensshUpgrade openssh-askpassUpgrade openssh-keycat | Mar 22, 2016 | Aug 3, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2015 |
| Suse | — | Upgrade openssh-fipsUpgrade openssh-openssl1-helpersUpgrade openssh-askpassUpgrade opensshUpgrade openssh-openssl1Upgrade openssh-helpersUpgrade openssh-askpass-gnome | Dec 18, 2015 | Aug 2, 2015 |
| Ubuntu | — | Upgrade openssh-server | Nov 8, 2024 | Aug 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub