GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2016:2555-1

Vulnerability from csaf_suse - Published: 2016-10-17 14:52 - Updated: 2016-10-17 14:52
Summary
Security update for openssh-openssl1
Severity
Moderate
Notes
Title of the patch: Security update for openssh-openssl1
Description of the patch: This update for openssh-openssl1 fixes the following issues: Security issues fixed: - CVE-2016-6210: Prevent user enumeration through the timing of password processing (bsc#989363) - CVE-2016-6515: limit accepted password length (prevents possible DoS) (bsc#992533) - CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632) - CVE-2016-1908: prevent X11 SECURITY circumvention when forwarding X11 connections (bsc#962313) - CVE-2015-8325: ignore PAM environment when using login (bsc#975865) - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902) - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used (bsc#948902) Bugs fixed: - avoid complaining about unset DISPLAY variable (bsc#981654) - Correctly parse GSSAPI KEX algorithms (bsc#961368) - more verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414) - fix PRNG re-seeding (bsc#960414, bsc#729190) - Allow empty Match blocks (bsc#961494)
Patchnames: secsp3-openssh-openssl1-12794
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2015-8325
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2016-1908
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 10 products, the same list as for CVE-2015-8325
Threats
Impact low
CVE-2016-3115
6.4 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Affected products
Recommended 10 products, the same list as for CVE-2015-8325
Threats
Impact moderate
CVE-2016-6210
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 10 products, the same list as for CVE-2015-8325
Threats
Impact moderate
CVE-2016-6515
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 10 products, the same list as for CVE-2015-8325
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/729190 self
https://bugzilla.suse.com/932483 self
https://bugzilla.suse.com/948902 self
https://bugzilla.suse.com/960414 self
https://bugzilla.suse.com/961368 self
https://bugzilla.suse.com/961494 self
https://bugzilla.suse.com/962313 self
https://bugzilla.suse.com/965576 self
https://bugzilla.suse.com/970632 self
https://bugzilla.suse.com/975865 self
https://bugzilla.suse.com/981654 self
https://bugzilla.suse.com/989363 self
https://bugzilla.suse.com/992533 self
https://www.suse.com/security/cve/CVE-2015-8325/ self
https://www.suse.com/security/cve/CVE-2016-1908/ self
https://www.suse.com/security/cve/CVE-2016-3115/ self
https://www.suse.com/security/cve/CVE-2016-6210/ self
https://www.suse.com/security/cve/CVE-2016-6515/ self
https://www.suse.com/security/cve/CVE-2015-8325 external
https://bugzilla.suse.com/1138392 external
https://bugzilla.suse.com/975865 external
https://bugzilla.suse.com/996040 external
https://www.suse.com/security/cve/CVE-2016-1908 external
https://bugzilla.suse.com/1001712 external
https://bugzilla.suse.com/1005738 external
https://bugzilla.suse.com/1010950 external
https://bugzilla.suse.com/1138392 external
https://bugzilla.suse.com/962313 external
https://bugzilla.suse.com/996040 external
https://www.suse.com/security/cve/CVE-2016-3115 external
https://bugzilla.suse.com/1005738 external
https://bugzilla.suse.com/1010950 external
https://bugzilla.suse.com/1059233 external
https://bugzilla.suse.com/1138392 external
https://bugzilla.suse.com/970632 external
https://bugzilla.suse.com/992296 external
https://bugzilla.suse.com/992991 external
https://bugzilla.suse.com/996040 external
https://www.suse.com/security/cve/CVE-2016-6210 external
https://bugzilla.suse.com/1001712 external
https://bugzilla.suse.com/1010950 external
https://bugzilla.suse.com/1105010 external
https://bugzilla.suse.com/1138392 external
https://bugzilla.suse.com/989363 external
https://www.suse.com/security/cve/CVE-2016-6515 external
https://bugzilla.suse.com/1010950 external
https://bugzilla.suse.com/1115893 external
https://bugzilla.suse.com/992533 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssh-openssl1",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for openssh-openssl1 fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2016-6210: Prevent user enumeration through the timing of password\n  processing (bsc#989363)\n- CVE-2016-6515: limit accepted password length (prevents possible DoS)\n  (bsc#992533)\n- CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632)\n- CVE-2016-1908: prevent X11 SECURITY circumvention when forwarding X11\n  connections (bsc#962313)\n- CVE-2015-8325: ignore PAM environment when using login (bsc#975865)\n- Disable DH parameters under 2048 bits by default and allow\n  lowering the limit back to the RFC 4419 specified minimum\n  through an option (bsc#932483, bsc#948902)\n- Allow lowering the DH groups parameter limit in server as well\n  as when GSSAPI key exchange is used (bsc#948902)\n\nBugs fixed:\n- avoid complaining about unset DISPLAY variable (bsc#981654)\n- Correctly parse GSSAPI KEX algorithms (bsc#961368)\n- more verbose FIPS mode/CC related documentation in README.FIPS\n  (bsc#965576, bsc#960414)\n- fix PRNG re-seeding (bsc#960414, bsc#729190)\n- Allow empty Match blocks (bsc#961494)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "secsp3-openssh-openssl1-12794",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2555-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2555-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162555-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2555-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002338.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 729190",
        "url": "https://bugzilla.suse.com/729190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 932483",
        "url": "https://bugzilla.suse.com/932483"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 948902",
        "url": "https://bugzilla.suse.com/948902"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 960414",
        "url": "https://bugzilla.suse.com/960414"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 961368",
        "url": "https://bugzilla.suse.com/961368"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 961494",
        "url": "https://bugzilla.suse.com/961494"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962313",
        "url": "https://bugzilla.suse.com/962313"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 965576",
        "url": "https://bugzilla.suse.com/965576"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 970632",
        "url": "https://bugzilla.suse.com/970632"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975865",
        "url": "https://bugzilla.suse.com/975865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981654",
        "url": "https://bugzilla.suse.com/981654"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 989363",
        "url": "https://bugzilla.suse.com/989363"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 992533",
        "url": "https://bugzilla.suse.com/992533"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8325 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8325/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1908 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1908/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3115 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3115/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6210 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6515 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6515/"
      }
    ],
    "title": "Security update for openssh-openssl1",
    "tracking": {
      "current_release_date": "2016-10-17T14:52:50Z",
      "generator": {
        "date": "2016-10-17T14:52:50Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2555-1",
      "initial_release_date": "2016-10-17T14:52:50Z",
      "revision_history": [
        {
          "date": "2016-10-17T14:52:50Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-6.6p1-15.1.i586",
                "product": {
                  "name": "openssh-openssl1-6.6p1-15.1.i586",
                  "product_id": "openssh-openssl1-6.6p1-15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-6.6p1-15.1.i586",
                "product": {
                  "name": "openssh-openssl1-helpers-6.6p1-15.1.i586",
                  "product_id": "openssh-openssl1-helpers-6.6p1-15.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-6.6p1-15.1.ia64",
                "product": {
                  "name": "openssh-openssl1-6.6p1-15.1.ia64",
                  "product_id": "openssh-openssl1-6.6p1-15.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-6.6p1-15.1.ia64",
                "product": {
                  "name": "openssh-openssl1-helpers-6.6p1-15.1.ia64",
                  "product_id": "openssh-openssl1-helpers-6.6p1-15.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-6.6p1-15.1.ppc64",
                "product": {
                  "name": "openssh-openssl1-6.6p1-15.1.ppc64",
                  "product_id": "openssh-openssl1-6.6p1-15.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-6.6p1-15.1.ppc64",
                "product": {
                  "name": "openssh-openssl1-helpers-6.6p1-15.1.ppc64",
                  "product_id": "openssh-openssl1-helpers-6.6p1-15.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-6.6p1-15.1.s390x",
                "product": {
                  "name": "openssh-openssl1-6.6p1-15.1.s390x",
                  "product_id": "openssh-openssl1-6.6p1-15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-6.6p1-15.1.s390x",
                "product": {
                  "name": "openssh-openssl1-helpers-6.6p1-15.1.s390x",
                  "product_id": "openssh-openssl1-helpers-6.6p1-15.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-openssl1-6.6p1-15.1.x86_64",
                "product": {
                  "name": "openssh-openssl1-6.6p1-15.1.x86_64",
                  "product_id": "openssh-openssl1-6.6p1-15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-openssl1-helpers-6.6p1-15.1.x86_64",
                "product": {
                  "name": "openssh-openssl1-helpers-6.6p1-15.1.x86_64",
                  "product_id": "openssh-openssl1-helpers-6.6p1-15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11-SECURITY",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11-SECURITY",
                  "product_id": "SUSE Linux Enterprise Server 11-SECURITY",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:security"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-6.6p1-15.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586"
        },
        "product_reference": "openssh-openssl1-6.6p1-15.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-6.6p1-15.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64"
        },
        "product_reference": "openssh-openssl1-6.6p1-15.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-6.6p1-15.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64"
        },
        "product_reference": "openssh-openssl1-6.6p1-15.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-6.6p1-15.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x"
        },
        "product_reference": "openssh-openssl1-6.6p1-15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-6.6p1-15.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64"
        },
        "product_reference": "openssh-openssl1-6.6p1-15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-6.6p1-15.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586"
        },
        "product_reference": "openssh-openssl1-helpers-6.6p1-15.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-6.6p1-15.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64"
        },
        "product_reference": "openssh-openssl1-helpers-6.6p1-15.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-6.6p1-15.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64"
        },
        "product_reference": "openssh-openssl1-helpers-6.6p1-15.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-6.6p1-15.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x"
        },
        "product_reference": "openssh-openssl1-helpers-6.6p1-15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-openssl1-helpers-6.6p1-15.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
        },
        "product_reference": "openssh-openssl1-helpers-6.6p1-15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8325",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8325"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8325",
          "url": "https://www.suse.com/security/cve/CVE-2015-8325"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2015-8325",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 975865 for CVE-2015-8325",
          "url": "https://bugzilla.suse.com/975865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2015-8325",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-17T14:52:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8325"
    },
    {
      "cve": "CVE-2016-1908",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1908"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1908",
          "url": "https://www.suse.com/security/cve/CVE-2016-1908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1001712 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1001712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005738 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1005738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010950 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1010950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962313 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/962313"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-17T14:52:50Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-1908"
    },
    {
      "cve": "CVE-2016-3115",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3115"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3115",
          "url": "https://www.suse.com/security/cve/CVE-2016-3115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005738 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1005738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010950 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1010950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1059233 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1059233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970632 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/970632"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992296 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/992296"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/992991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-17T14:52:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3115"
    },
    {
      "cve": "CVE-2016-6210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6210",
          "url": "https://www.suse.com/security/cve/CVE-2016-6210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1001712 for CVE-2016-6210",
          "url": "https://bugzilla.suse.com/1001712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010950 for CVE-2016-6210",
          "url": "https://bugzilla.suse.com/1010950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105010 for CVE-2016-6210",
          "url": "https://bugzilla.suse.com/1105010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-6210",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989363 for CVE-2016-6210",
          "url": "https://bugzilla.suse.com/989363"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-17T14:52:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6210"
    },
    {
      "cve": "CVE-2016-6515",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6515"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6515",
          "url": "https://www.suse.com/security/cve/CVE-2016-6515"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010950 for CVE-2016-6515",
          "url": "https://bugzilla.suse.com/1010950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1115893 for CVE-2016-6515",
          "url": "https://bugzilla.suse.com/1115893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992533 for CVE-2016-6515",
          "url": "https://bugzilla.suse.com/992533"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-6.6p1-15.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssh-openssl1-helpers-6.6p1-15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-17T14:52:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6515"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.