BSA-2016-019
Summary
Security Advisory ID : BSA-2016-019
Component : OpenSSH
Revision : 3.0: Final
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
Affected Products
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | May 10, 2016 |
| 2.0 | Updated with Fibre Channel Products Only | Sept 20, 2018 |
| 3.0 | Updated with Brocade Fabric OS final statement | May 24, 2019 |