Описание
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1:7.4p1-1 |
| devel | not-affected | 1:7.4p1-1 |
| esm-infra-legacy/trusty | not-affected | code not present |
| esm-infra-legacy/xenial | released | 1:7.2p2-4ubuntu2.4 |
| esm-infra/xenial | released | 1:7.2p2-4ubuntu2.4 |
| precise | not-affected | code not present |
| precise/esm | not-affected | code not present |
| trusty | not-affected | code not present |
| trusty/esm | not-affected | code not present |
| upstream | released | 1:7.4p1-1 |
Показывать по
EPSS
6.9 Medium
CVSS2
7 High
CVSS3
Связанные уязвимости
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
sshd in OpenSSH before 7.4, when privilege separation is not used, cre ...
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
Уязвимость средства криптографической защиты OpenSSH, позволяющая нарушителю повысить свои привилегии
EPSS
6.9 Medium
CVSS2
7 High
CVSS3