VDB
BDU%3A2022-07484
BDU%3A2022-07484
PUBLISHED
CVSS 8.5 HIGH
Уязвимость функции kbdint_next_device() службы sshd средства криптографической защиты OpenSSH, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force) или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
8.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat, Inc., Fedora Project, Canonical Ltd., Oracle Corp., Сообщество свободного программного обеспечения, Juniper Networks Inc., The OpenBSD Project, Apple Inc., Arista Networks, Inc., Siemens AG | Red Hat Enterprise Linux, Fedora, Ubuntu, Solaris, Oracle Linux, Debian GNU/Linux, Oracle Communications Policy Management, JunOS, OpenSSH, MacOS, Oracle Sun Integrated Lights Out Manager (ILOM), Oracle VM Server for x86, Arista EOS, OpenBSD, SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) | |
| Red Hat Inc., Fedora Project, Canonical Ltd., Oracle Corp., Сообщество свободного программного обеспечения, Juniper Networks Inc., OpenBSD Project, Apple Inc., Arista Networks, Inc., Siemens AG | Red Hat Enterprise Linux, Fedora, Ubuntu, Solaris, Oracle Linux, Debian GNU/Linux, Oracle Communications Policy Management, JunOS, OpenSSH, MacOS, Oracle Sun Integrated Lights Out Manager (ILOM), Oracle VM Server for x86, Arista EOS, OpenBSD, SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR) |
Timeline
- Dec 28, 2022 CVE Published
- May 29, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c advisory
- http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42&r2=1.43&f=h advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10697 url
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html url
- http://openwall.com/lists/oss-security/2015/07/23/4 url
- http://seclists.org/fulldisclosure/2015/Jul/92 url
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html url
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html url
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html url
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html url
- http://www.ubuntu.com/usn/USN-2710-1 url
- http://www.ubuntu.com/usn/USN-2710-2 url
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf url
- https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html advisory
- https://support.apple.com/kb/HT205031 url
- https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12 url
- https://ubuntu.com/security/CVE-2015-5600 url
…and 16 more