Main
Vulnerability Database
Exploits
ID:6441 - Exploit for Input validation error in OpenSSH - CVE-2016-3115
ID:6441 - Exploit for Input validation error in OpenSSH - CVE-2016-3115
Published: June 17, 2021
Vulnerability identifier: #VU33811
Vulnerability risk: Medium
CVE-ID: CVE-2016-3115
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
OpenSSH
OpenSSH
Link to public exploit:
Vulnerability description
The vulnerability allows a remote authenticated user to read and manipulate data.
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions. <a href="https://cwe.mitre.org/data/definitions/93.html">CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')</a>
Remediation
Install update from vendor's website.