Published: 01/05/2016 Updated: 13/12/2022

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 643

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The do_setup_env function in session.c in sshd in OpenSSH up to and including 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
debian debian linux 7.0
openbsd openssh
canonical ubuntu touch 15.04
canonical ubuntu linux 12.04
canonical ubuntu core 15.04
canonical ubuntu linux 15.10
canonical ubuntu linux 14.04

Synopsis Moderate: openssh security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for openssh is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) ba ...

Several security issues were fixed in OpenSSH ...

Shayan Sadigh discovered a vulnerability in OpenSSH: If PAM support is enabled and the sshd PAM configuration is configured to read userspecified environment variables and the UseLogin option is enabled, a local user may escalate her privileges to root In Debian UseLogin is not enabled by default For the oldstable distribution (wheezy), this prob ...

It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program In configurations with UseLogin=yes and the pam_env PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root ...

CWE-264 https://security-tracker.debian.org/tracker/CVE-2015-8325 https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html https://bugzilla.redhat.com/show_bug.cgi?id=1328012 https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755 http://www.securityfocus.com/bid/86187 http://www.debian.org/security/2016/dsa-3550 https://security.gentoo.org/glsa/201612-18 http://www.securitytracker.com/id/1036487 http://rhn.redhat.com/errata/RHSA-2017-0641.html http://rhn.redhat.com/errata/RHSA-2016-2588.html https://security.netapp.com/advisory/ntap-20180628-0001/https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf https://access.redhat.com/errata/RHSA-2017:0641 https://nvd.nist.gov https://usn.ubuntu.com/2966-1/https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-21

CVE-2015-8325

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect