Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Aix 6.1 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Aix 7.1 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Aix 7.2 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Alpine Linux | — | Upgrade openssh | Aug 30, 2017 | Mar 22, 2016 |
| Centos_linux | — | Upgrade openssh-server-sysvinitUpgrade opensshUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-ldapUpgrade pam_ssh_agent_auth | Jul 6, 2016 | Mar 21, 2016 |
| Debian | — | Upgrade openssh | Feb 25, 2019 | Mar 22, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portable | Dec 10, 2025 | Mar 11, 2016 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Mar 22, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh | Nov 30, 2017 | Mar 22, 2016 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory8 | Nov 30, 2017 | Mar 22, 2016 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 7.2p2 | Mar 24, 2016 | Mar 22, 2016 |
| Oracle Solaris | — | Upgrade network/openssh to version 7.2.0.2-0.175.3.9.0.3.0 on Solaris 11.3Upgrade consolidation/osnet/osnet-message-files to version 0.5.11-0.175.3.8.0.3.0 on Solaris 11.3Upgrade network/ssh to version 0.5.11-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Mar 22, 2016 |
| Oracle_linux | — | Upgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-clientsUpgrade openssh-server-sysvinitUpgrade openssh-keycatUpgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-askpass | Mar 22, 2016 | Mar 22, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 10, 2016 |
| Suse | — | Upgrade openssh-fipsUpgrade openssh-askpass-gnomeUpgrade openssh-openssl1-helpersUpgrade opensshUpgrade openssh-helpersUpgrade openssh-openssl1Upgrade openssh-askpass | May 24, 2016 | Mar 22, 2016 |
| Ubuntu | — | Upgrade openssh-server | May 9, 2016 | Mar 22, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub