VDB
BDU%3A2022-07484
BDU%3A2022-07484
PUBLISHED
CVSS 8.5 HIGH
Уязвимость функции kbdint_next_device() службы sshd средства криптографической защиты OpenSSH, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force) или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
8.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Fedora Project, Canonical Ltd., Oracle Corp., Сообщество свободного программного обеспечения, Juniper Networks Inc., OpenBSD Project, Apple Inc., Arista Networks, Inc., Siemens AG | Red Hat Enterprise Linux, Fedora, Ubuntu, Solaris, Oracle Linux, Debian GNU/Linux, Oracle Communications Policy Management, JunOS, OpenSSH, MacOS, Oracle Sun Integrated Lights Out Manager (ILOM), Oracle VM Server for x86, Arista EOS, OpenBSD, SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) |
Timeline
- Dec 28, 2022 CVE Published
- Oct 25, 2023 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c url
- http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42&r2=1.43&f=h url
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10697 url
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html url
- http://openwall.com/lists/oss-security/2015/07/23/4 url
- http://seclists.org/fulldisclosure/2015/Jul/92 url
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html url
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html url
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html url
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html url
- http://www.ubuntu.com/usn/USN-2710-1 url
- http://www.ubuntu.com/usn/USN-2710-2 url
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf url
- https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html url
- https://support.apple.com/kb/HT205031 url
- https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12 url
- https://ubuntu.com/security/CVE-2015-5600 url
…and 16 more