The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssh | Aug 30, 2017 | Aug 2, 2015 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Aug 2, 2015 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Mar 29, 2016 | Aug 2, 2015 |
| Centos_linux | — | Upgrade openssh-askpassUpgrade openssh-clientsUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-ldapUpgrade openssh-server | Jul 6, 2016 | Aug 2, 2015 |
| Debian | — | Upgrade openssh | Jul 30, 2024 | Aug 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 29, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portable | Dec 10, 2025 | Jul 27, 2015 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Aug 2, 2015 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Aug 5, 2015 | Aug 3, 2015 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade service/network/ssh to version 0.5.11-0.175.2.15.0.3.2 on Solaris 11.2Upgrade service/network/ssh to version 0.5.11-0.175.3.1.0.2.0 on Solaris 11.3 | May 29, 2017 | Aug 2, 2015 |
| Oracle_linux | — | Upgrade openssh-server-sysvinitUpgrade openssh-keycatUpgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-ldapUpgrade openssh-serverUpgrade openssh-clients | Mar 22, 2016 | Aug 3, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2015 |
| Suse | — | Upgrade openssh-fipsUpgrade openssh-askpass-gnomeUpgrade openssh-openssl1-helpersUpgrade openssh-helpersUpgrade openssh-openssl1Upgrade opensshUpgrade openssh-askpass | Dec 18, 2015 | Aug 2, 2015 |
| Ubuntu | — | Upgrade openssh-server | Nov 8, 2024 | Aug 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub