Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2275-1

Опубликовано: 09 авг. 2018
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

Security issues fixed:

  • CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370).
  • CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYSmessage (bsc#1076957).
  • CVE-2017-15906: Fix r/o sftp-server zero byte file creation (bsc#1065000).
  • CVE-2008-1483: Fix accidental re-introduction of CVE-2008-1483 (bsc#1069509).

Bug fixes:

  • bsc#1017099: Match conditions with uppercase hostnames fail (bsc#1017099)
  • bsc#1053972: supportedKeyExchanges diffie-hellman-group1-sha1 is duplicated (bsc#1053972)
  • bsc#1023275: Messages suppressed after upgrade from SLES 11 SP3 to SP4 (bsc#1023275)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
openssh-6.6p1-36.3.1
openssh-askpass-gnome-6.6p1-36.3.1
openssh-fips-6.6p1-36.3.1
openssh-helpers-6.6p1-36.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
openssh-6.6p1-36.3.1
openssh-askpass-gnome-6.6p1-36.3.1
openssh-fips-6.6p1-36.3.1
openssh-helpers-6.6p1-36.3.1

Ссылки

Описание

OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1
Ссылки

Описание

The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1
Ссылки

Описание

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1
Ссылки

Описание

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-36.3.1
SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-36.3.1
Ссылки
Уязвимость SUSE-SU-2018:2275-1