openbsd openssh CVE-2016-1908 vulnerability in OpenBSD and Other Products
Published on April 11, 2017

product logo product logo product logo product logo
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.

Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2016-1908 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is an authentification Vulnerability?

When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

CVE-2016-1908 has been classified to as an authentification vulnerability or weakness.


Products Associated with CVE-2016-1908

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-1908 are published in these products:

OpenBSD OpenSSH
 
Debian Linux
 
Oracle Linux
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Workstation
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Eus
 

Exploit Probability

EPSS
13.74%
Percentile
96.03%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.