High severity · published May 1, 2016
CVE-2015-8325
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home…
7.8
CVSS
0.6%
EPSS
No
On KEV
Description
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
OP
Openssh · Openbsd
through 7.2 · source: NVD
UC
Ubuntu Core · Canonical
15.04 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 15.10 · source: NVD
UT
Ubuntu Touch · Canonical
15.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8325
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8325
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2016-2588.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2017-0641.html
www.debian.org
http://www.debian.org/security/2016/dsa-3550
www.securityfocus.com
http://www.securityfocus.com/bid/86187
www.securitytracker.com
http://www.securitytracker.com/id/1036487
anongit.mindrot.org
https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
More from Ubuntu Core
7.8
CVE-2016-1576
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs…
7.8
CVE-2016-1575
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a…
5.9
CVE-2017-6507
An issue was discovered in AppArmor before 2.12