Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Aix 6.1 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Aix 7.1 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Aix 7.2 Openssh_advisory8 | — | — | Jun 4, 2016 | May 3, 2016 |
| Alpine Linux | — | Upgrade openssh | Aug 30, 2017 | Mar 22, 2016 |
| Centos_linux | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server-sysvinitUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-ldapUpgrade pam_ssh_agent_auth | Jul 6, 2016 | Mar 21, 2016 |
| Debian | — | Upgrade openssh | Feb 25, 2019 | Mar 22, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2016 |
| Freebsd | — | Upgrade openssh-portableUpgrade FreeBSD | Dec 10, 2025 | Mar 11, 2016 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Oct 30, 2017 | Mar 22, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh | Nov 30, 2017 | Mar 22, 2016 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory8 | Nov 30, 2017 | Mar 22, 2016 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 7.2p2 | Mar 24, 2016 | Mar 22, 2016 |
| Oracle Solaris | — | Upgrade network/openssh to version 7.2.0.2-0.175.3.9.0.3.0 on Solaris 11.3Upgrade consolidation/osnet/osnet-message-files to version 0.5.11-0.175.3.8.0.3.0 on Solaris 11.3Upgrade network/ssh to version 0.5.11-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Mar 22, 2016 |
| Oracle_linux | — | Upgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-server-sysvinitUpgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-ldap | Mar 22, 2016 | Mar 22, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 10, 2016 |
| Suse | — | Upgrade openssh-fipsUpgrade openssh-openssl1-helpersUpgrade openssh-askpass-gnomeUpgrade openssh-helpersUpgrade openssh-openssl1Upgrade openssh-askpassUpgrade openssh | May 24, 2016 | Mar 22, 2016 |
| Ubuntu | — | Upgrade openssh-server | May 9, 2016 | Mar 22, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub