Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-openssh | Aug 30, 2017 | Mar 22, 2016 |
| Centos_linux | — | centos-upgrade-opensshcentos-upgrade-openssh-askpasscentos-upgrade-openssh-clientscentos-upgrade-openssh-keycatcentos-upgrade-openssh-ldapcentos-upgrade-openssh-servercentos-upgrade-openssh-server-sysvinitcentos-upgrade-pam_ssh_agent_auth | Jul 6, 2016 | Mar 21, 2016 |
| Debian | debian-upgrade-openssh | Feb 25, 2019 | Mar 22, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Apr 27, 2016 | |
| Freebsd | freebsd-upgrade-package-openssh-portablefreebsd-upgrade-base-10_2-release-p14freebsd-upgrade-base-10_1-release-p31freebsd-upgrade-base-9_3-release-p39 | Dec 10, 2025 | Mar 11, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-openssh | Oct 30, 2017 | Mar 22, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-opensshhuawei-euleros-2_0_sp1-upgrade-openssh-askpasshuawei-euleros-2_0_sp1-upgrade-openssh-clientshuawei-euleros-2_0_sp1-upgrade-openssh-keycathuawei-euleros-2_0_sp1-upgrade-openssh-server | Nov 30, 2017 | Mar 22, 2016 | |
| Ibm Aix | ibm-aix-openssh_advisory8 | Nov 30, 2017 | Mar 22, 2016 | |
| Openbsd Openssh | openbsd-openssh-upgrade-7_2p2 | Mar 24, 2016 | Mar 22, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-consolidation-osnet-osnet-message-files-0-5-11-0-175-3-8-0-3-0oracle-solaris-11-3-upgrade-network-openssh-7-2-0-2-0-175-3-9-0-3-0oracle-solaris-11-3-upgrade-network-ssh-0-5-11-0-175-3-8-0-2-0 | May 29, 2017 | Mar 22, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-opensshoracle-linux-upgrade-openssh-askpassoracle-linux-upgrade-openssh-clientsoracle-linux-upgrade-openssh-keycatoracle-linux-upgrade-openssh-ldaporacle-linux-upgrade-openssh-serveroracle-linux-upgrade-openssh-server-sysvinitoracle-linux-upgrade-pam-ssh-agent-auth | Mar 22, 2016 | Mar 22, 2016 |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Mar 10, 2016 |
| Suse | — | suse-upgrade-opensshsuse-upgrade-openssh-askpasssuse-upgrade-openssh-askpass-gnomesuse-upgrade-openssh-fipssuse-upgrade-openssh-helperssuse-upgrade-openssh-openssl1suse-upgrade-openssh-openssl1-helpers | May 24, 2016 | Mar 22, 2016 |
| Ubuntu | ubuntu-upgrade-openssh-server | May 9, 2016 | Mar 22, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub