PT-2015-3444 · Openbsd+6 · Openssh+6
Jann Horn
·
Published
2015-07-16
·
Updated
2026-05-27
·
CVE-2015-5600
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions through 6.9
Description
The issue is related to the
kbdint next device() function in the OpenSSH sshd service, which does not properly restrict the processing of keyboard-interactive devices within a single connection. This makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service via a long and duplicative list in the ssh -oKbdInteractiveDevices option. The vulnerability allows for unlimited entries within the login time limit, permitting a brute-force attack on weak passwords within the login time period.Recommendations
For OpenSSH versions through 6.9, consider disabling the
kbdint next device() function or restricting the use of the ssh -oKbdInteractiveDevices option to minimize the risk of exploitation. Additionally, restrict access to the auth2-chall.c module to prevent abuse. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Junos
Openssh
Red Hat
Suse
Ubuntu