The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssh_advisory5 | — | — | Nov 16, 2015 | Aug 2, 2015 |
| Aix 6.1 Openssh_advisory5 | — | — | Nov 16, 2015 | Aug 2, 2015 |
| Aix 7.1 Openssh_advisory5 | — | — | Nov 16, 2015 | Aug 2, 2015 |
| Debian | — | Upgrade openssh | Jul 30, 2024 | Aug 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 28, 2015 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Aug 2, 2015 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory5 | Nov 30, 2017 | Aug 2, 2015 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 6.9 | Aug 5, 2015 | Aug 3, 2015 |
| Oracle Solaris | — | Upgrade network/openssh to version 7.1.0.1-0.175.3.5.0.5.0 on Solaris 11.3 | May 29, 2017 | Aug 2, 2015 |
| Oracle_linux | — | Upgrade openssh-askpassUpgrade opensshUpgrade openssh-ldapUpgrade openssh-clientsUpgrade openssh-serverUpgrade pam_ssh_agent_auth | May 12, 2016 | Aug 3, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 1, 2015 |
| Suse | — | Upgrade openssh-askpass-gnomeUpgrade openssh-askpassUpgrade openssh-openssl1-helpersUpgrade opensshUpgrade openssh-helpersUpgrade openssh-fipsUpgrade openssh-openssl1 | Dec 18, 2015 | Aug 2, 2015 |
| Ubuntu | — | Upgrade openssh-server | Nov 8, 2024 | Aug 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub