The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssh | Aug 30, 2017 | Aug 2, 2015 |
| Apple Osx Apache | — | Apply OS X security update 2015-006Upgrade macOS to the latest version | Aug 28, 2015 | Aug 2, 2015 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Mar 29, 2016 | Aug 2, 2015 |
| Centos_linux | — | Upgrade openssh-ldapUpgrade openssh-serverUpgrade openssh-clientsUpgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_auth | Jul 6, 2016 | Aug 2, 2015 |
| Debian | — | Upgrade openssh | Jul 30, 2024 | Aug 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 29, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portable | Dec 10, 2025 | Jul 27, 2015 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Aug 2, 2015 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Aug 5, 2015 | Aug 3, 2015 |
| Oracle Solaris | — | Upgrade service/network/ssh to version 0.5.11-0.175.2.15.0.3.2 on Solaris 11.2Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade service/network/ssh to version 0.5.11-0.175.3.1.0.2.0 on Solaris 11.3 | May 29, 2017 | Aug 2, 2015 |
| Oracle_linux | — | Upgrade openssh-askpassUpgrade opensshUpgrade openssh-keycatUpgrade openssh-server-sysvinitUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-ldapUpgrade pam_ssh_agent_auth | Mar 22, 2016 | Aug 3, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2015 |
| Suse | — | Upgrade opensshUpgrade openssh-askpassUpgrade openssh-openssl1Upgrade openssh-askpass-gnomeUpgrade openssh-fipsUpgrade openssh-helpersUpgrade openssh-openssl1-helpers | Dec 18, 2015 | Aug 2, 2015 |
| Ubuntu | — | Upgrade openssh-server | Nov 8, 2024 | Aug 3, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub