Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-5600
Vulnerability from cvelistv5
Published
2015-08-03 00:00
Modified
2024-08-06 06:50
Severity ?
EPSS score ?
Summary
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T06:50:03.295Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"name": "USN-2710-2",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2710-2"
},
{
"name": "FEDORA-2015-13469",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"name": "GLSA-201512-04",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201512-04"
},
{
"tags": [
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20151106-0001/"
},
{
"name": "RHSA-2016:0466",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0466.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697"
},
{
"name": "APPLE-SA-2015-08-13-2",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"tags": [
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157"
},
{
"name": "75990",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/75990"
},
{
"name": "91787",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480"
},
{
"name": "SUSE-SU-2015:1581",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"name": "92012",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/92012"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/kb/HT205031"
},
{
"name": "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html"
},
{
"name": "[oss-security] 20150723 Re: CVE Request for OpenSSH vulnerability - authentication limits bypass",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2015/07/23/4"
},
{
"name": "USN-2710-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2710-1"
},
{
"name": "FEDORA-2015-11981",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html"
},
{
"name": "1032988",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032988"
},
{
"name": "20150717 OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2015/Jul/92"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12"
},
{
"tags": [
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-07-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-12-13T00:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"name": "USN-2710-2",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2710-2"
},
{
"name": "FEDORA-2015-13469",
"tags": [
"vendor-advisory"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"name": "GLSA-201512-04",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/201512-04"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136"
},
{
"url": "https://security.netapp.com/advisory/ntap-20151106-0001/"
},
{
"name": "RHSA-2016:0466",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0466.html"
},
{
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697"
},
{
"name": "APPLE-SA-2015-08-13-2",
"tags": [
"vendor-advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
},
{
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157"
},
{
"name": "75990",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/75990"
},
{
"name": "91787",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480"
},
{
"name": "SUSE-SU-2015:1581",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"name": "92012",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/92012"
},
{
"url": "https://support.apple.com/kb/HT205031"
},
{
"name": "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html"
},
{
"name": "[oss-security] 20150723 Re: CVE Request for OpenSSH vulnerability - authentication limits bypass",
"tags": [
"mailing-list"
],
"url": "http://openwall.com/lists/oss-security/2015/07/23/4"
},
{
"name": "USN-2710-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2710-1"
},
{
"name": "FEDORA-2015-11981",
"tags": [
"vendor-advisory"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html"
},
{
"name": "1032988",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032988"
},
{
"name": "20150717 OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass)",
"tags": [
"mailing-list"
],
"url": "http://seclists.org/fulldisclosure/2015/Jul/92"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-5600",
"datePublished": "2015-08-03T00:00:00",
"dateReserved": "2015-07-20T00:00:00",
"dateUpdated": "2024-08-06T06:50:03.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2015-5600\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-08-03T01:59:03.950\",\"lastModified\":\"2024-11-21T02:33:22.290\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en la funci\u00f3n kbdint_next_device en auth2-chall.c en sshd en OpenSSH hasta la versi\u00f3n 6.9, no restringe correctamente el procesamiento de dispositivos de teclado interactivo con una \u00fanica conexi\u00f3n, lo cual facilita a atacantes remotos ejecutar un ataque de fuerza bruta o causar una denegaci\u00f3n de servicio (mediante el consumo de la CPU) a trav\u00e9s de una lista larga y redundante en la opci\u00f3n ssh -oKbdInteractiveDevices, seg\u00fan lo demostrado por una modificaci\u00f3n en el cliente que provee una contrase\u00f1a diferente para cada uno de los elementos pam de la lista.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:C\",\"baseScore\":8.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":7.8,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"6.9\",\"matchCriteriaId\":\"27C9A807-7740-4D75-9B01-91ED53D14C40\"}]}]}],\"references\":[{\"url\":\"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://openwall.com/lists/oss-security/2015/07/23/4\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0466.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://seclists.org/fulldisclosure/2015/Jul/92\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/75990\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/91787\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/92012\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id/1032988\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2710-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2710-2\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201512-04\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20151106-0001/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.apple.com/kb/HT205031\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2015/07/23/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0466.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2015/Jul/92\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/75990\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/91787\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/92012\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1032988\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2710-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2710-2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201512-04\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20151106-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT205031\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
ICSA-22-349-21
Vulnerability from csaf_cisa
Published
2022-12-15 00:00
Modified
2022-12-15 00:00
Summary
Siemens SCALANCE X-200RNA Switch Devices
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow a denial-of-service condition or could lead to execution of arbitrary code.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability these vulnerabilities. Specifically, users should:
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage at cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Recommended Practices
CISA also recommends users take the following measures to protect themselves from social engineering attacks:
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Exploitability
These vulnerabilities are exploitable remotely. These vulnerabilities have a low attack complexity.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens",
"summary": "reporting these vulnerabilities to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could allow a denial-of-service condition or could lead to execution of arbitrary code.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": " Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": " Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": " Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability these vulnerabilities. Specifically, users should:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage at cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "other",
"text": "These vulnerabilities are exploitable remotely. These vulnerabilities have a low attack complexity.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "external",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-412672.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-349-21 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-349-21.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-349-21 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-21"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
},
{
"category": "external",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-412672.txt"
}
],
"title": "Siemens SCALANCE X-200RNA Switch Devices",
"tracking": {
"current_release_date": "2022-12-15T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-349-21",
"initial_release_date": "2022-12-15T00:00:00.000000Z",
"revision_history": [
{
"date": "2022-12-15T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BA00-2MB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BA00-2KB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-2NA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-3LA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-3PA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0190",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0190"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2003-0190"
},
{
"cve": "CVE-2003-1562",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-1562"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2003-1562"
},
{
"cve": "CVE-2014-8176",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8176"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2014-8176"
},
{
"cve": "CVE-2015-0207",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0207"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0207"
},
{
"cve": "CVE-2015-0208",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0208"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0208"
},
{
"cve": "CVE-2015-0209",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0209"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0209"
},
{
"cve": "CVE-2015-0285",
"cwe": {
"id": "CWE-335",
"name": "Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0285"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0285"
},
{
"cve": "CVE-2015-0286",
"cwe": {
"id": "CWE-1024",
"name": "Comparison of Incompatible Types"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0286"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0286"
},
{
"cve": "CVE-2015-0287",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0287"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0287"
},
{
"cve": "CVE-2015-0288",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0288"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0288"
},
{
"cve": "CVE-2015-0289",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0289"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0289"
},
{
"cve": "CVE-2015-0290",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0290"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0290"
},
{
"cve": "CVE-2015-0291",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0291"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0291"
},
{
"cve": "CVE-2015-0292",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0292"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0292"
},
{
"cve": "CVE-2015-0293",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0293"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0293"
},
{
"cve": "CVE-2015-1787",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1787"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1787"
},
{
"cve": "CVE-2015-1788",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1788"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1788"
},
{
"cve": "CVE-2015-1789",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1789"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1789"
},
{
"cve": "CVE-2015-1790",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1790"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1790"
},
{
"cve": "CVE-2015-1791",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1791"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1791"
},
{
"cve": "CVE-2015-1792",
"cwe": {
"id": "CWE-690",
"name": "Unchecked Return Value to NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1792"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1792"
},
{
"cve": "CVE-2015-1794",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1794"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1794"
},
{
"cve": "CVE-2015-3193",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3193"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3193"
},
{
"cve": "CVE-2015-3194",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3194"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3194"
},
{
"cve": "CVE-2015-3195",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3195"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3195"
},
{
"cve": "CVE-2015-3196",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3196"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3196"
},
{
"cve": "CVE-2015-3197",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3197"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3197"
},
{
"cve": "CVE-2015-4000",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4000"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"notes": [
{
"category": "summary",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5352"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"cwe": {
"id": "CWE-799",
"name": "Improper Control of Interaction Frequency"
},
"notes": [
{
"category": "summary",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-5600"
},
{
"cve": "CVE-2015-6563",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6563"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-6563"
},
{
"cve": "CVE-2015-6564",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6564"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-6564"
},
{
"cve": "CVE-2015-6565",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6565"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-6565"
},
{
"cve": "CVE-2015-8325",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8325"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-8325"
},
{
"cve": "CVE-2016-0701",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0701"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0701"
},
{
"cve": "CVE-2016-0702",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0702"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0702"
},
{
"cve": "CVE-2016-0703",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0703"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0703"
},
{
"cve": "CVE-2016-0704",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0704"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0704"
},
{
"cve": "CVE-2016-0705",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2016-0777",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0777"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0777"
},
{
"cve": "CVE-2016-0778",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0778"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0778"
},
{
"cve": "CVE-2016-0797",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0797"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0797"
},
{
"cve": "CVE-2016-0798",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0798"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0798"
},
{
"cve": "CVE-2016-0799",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0799"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0799"
},
{
"cve": "CVE-2016-0800",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A cross-protocol attack was discovered that could allow an attacker to decrypt intercepted TLS sessions by using a server supporting SSLv2 as a Bleichenbacher RSA padding oracle.\nIn order to exploit the vulnerability, the attacker must have network access to the affected devices and must be in a privileged network position.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0800"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0800"
},
{
"cve": "CVE-2016-1907",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1907"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-1907"
},
{
"cve": "CVE-2016-1908",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1908"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-1908"
},
{
"cve": "CVE-2016-2105",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2105"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2105"
},
{
"cve": "CVE-2016-2106",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2106"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2106"
},
{
"cve": "CVE-2016-2107",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2107"
},
{
"cve": "CVE-2016-2108",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2108"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2108"
},
{
"cve": "CVE-2016-2109",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2109"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2109"
},
{
"cve": "CVE-2016-2176",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2176"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2176"
},
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2179"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2180",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2180"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2180"
},
{
"cve": "CVE-2016-2181",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2181"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2183"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6210",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6210"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6210"
},
{
"cve": "CVE-2016-6302",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6303"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6305",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6305"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6305"
},
{
"cve": "CVE-2016-6306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6306"
},
{
"cve": "CVE-2016-6307",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6307"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6307"
},
{
"cve": "CVE-2016-6308",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"notes": [
{
"category": "summary",
"text": "statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6308"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6308"
},
{
"cve": "CVE-2016-6515",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6515"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6515"
},
{
"cve": "CVE-2016-8858",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-8858"
},
{
"cve": "CVE-2016-10009",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10009"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10009"
},
{
"cve": "CVE-2016-10010",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10010"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10010"
},
{
"cve": "CVE-2016-10011",
"cwe": {
"id": "CWE-244",
"name": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10011"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10011"
},
{
"cve": "CVE-2016-10012",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10012"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10012"
},
{
"cve": "CVE-2017-3735",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3735"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2017-3735"
},
{
"cve": "CVE-2017-15906",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "summary",
"text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15906"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2017-15906"
},
{
"cve": "CVE-2018-15473",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15473"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2018-15473"
},
{
"cve": "CVE-2018-20685",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20685"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2018-20685"
},
{
"cve": "CVE-2019-1552",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be \u0027/usr/local\u0027. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of \u0027C:/usr/local\u0027, which may be world writable, which enables untrusted users to modify OpenSSL\u0027s default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, \u0027/usr/local/ssl\u0027 is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1552"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-1552"
},
{
"cve": "CVE-2019-6109",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6109"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-6109"
},
{
"cve": "CVE-2019-6110",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6110"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-6110"
},
{
"cve": "CVE-2019-6111",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6111"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-6111"
},
{
"cve": "CVE-2019-16905",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-16905"
}
]
}
icsa-22-349-21
Vulnerability from csaf_cisa
Published
2022-12-15 00:00
Modified
2022-12-15 00:00
Summary
Siemens SCALANCE X-200RNA Switch Devices
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow a denial-of-service condition or could lead to execution of arbitrary code.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability these vulnerabilities. Specifically, users should:
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage at cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Recommended Practices
CISA also recommends users take the following measures to protect themselves from social engineering attacks:
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Exploitability
These vulnerabilities are exploitable remotely. These vulnerabilities have a low attack complexity.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens",
"summary": "reporting these vulnerabilities to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could allow a denial-of-service condition or could lead to execution of arbitrary code.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": " Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": " Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": " Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability these vulnerabilities. Specifically, users should:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage at cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "other",
"text": "These vulnerabilities are exploitable remotely. These vulnerabilities have a low attack complexity.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "external",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-412672.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-349-21 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-349-21.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-349-21 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-21"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
},
{
"category": "external",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-412672.txt"
}
],
"title": "Siemens SCALANCE X-200RNA Switch Devices",
"tracking": {
"current_release_date": "2022-12-15T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-349-21",
"initial_release_date": "2022-12-15T00:00:00.000000Z",
"revision_history": [
{
"date": "2022-12-15T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BA00-2MB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BA00-2KB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-2NA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-3LA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-3PA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0190",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0190"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2003-0190"
},
{
"cve": "CVE-2003-1562",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2003-1562"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2003-1562"
},
{
"cve": "CVE-2014-8176",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8176"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2014-8176"
},
{
"cve": "CVE-2015-0207",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0207"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0207"
},
{
"cve": "CVE-2015-0208",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0208"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0208"
},
{
"cve": "CVE-2015-0209",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0209"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0209"
},
{
"cve": "CVE-2015-0285",
"cwe": {
"id": "CWE-335",
"name": "Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0285"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0285"
},
{
"cve": "CVE-2015-0286",
"cwe": {
"id": "CWE-1024",
"name": "Comparison of Incompatible Types"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0286"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0286"
},
{
"cve": "CVE-2015-0287",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0287"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0287"
},
{
"cve": "CVE-2015-0288",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0288"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0288"
},
{
"cve": "CVE-2015-0289",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0289"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0289"
},
{
"cve": "CVE-2015-0290",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0290"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0290"
},
{
"cve": "CVE-2015-0291",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0291"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0291"
},
{
"cve": "CVE-2015-0292",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0292"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0292"
},
{
"cve": "CVE-2015-0293",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0293"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-0293"
},
{
"cve": "CVE-2015-1787",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1787"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1787"
},
{
"cve": "CVE-2015-1788",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1788"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1788"
},
{
"cve": "CVE-2015-1789",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1789"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1789"
},
{
"cve": "CVE-2015-1790",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1790"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1790"
},
{
"cve": "CVE-2015-1791",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1791"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1791"
},
{
"cve": "CVE-2015-1792",
"cwe": {
"id": "CWE-690",
"name": "Unchecked Return Value to NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1792"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1792"
},
{
"cve": "CVE-2015-1794",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1794"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-1794"
},
{
"cve": "CVE-2015-3193",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3193"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3193"
},
{
"cve": "CVE-2015-3194",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3194"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3194"
},
{
"cve": "CVE-2015-3195",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3195"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3195"
},
{
"cve": "CVE-2015-3196",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3196"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3196"
},
{
"cve": "CVE-2015-3197",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3197"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-3197"
},
{
"cve": "CVE-2015-4000",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4000"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"cwe": {
"id": "CWE-829",
"name": "Inclusion of Functionality from Untrusted Control Sphere"
},
"notes": [
{
"category": "summary",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5352"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"cwe": {
"id": "CWE-799",
"name": "Improper Control of Interaction Frequency"
},
"notes": [
{
"category": "summary",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-5600"
},
{
"cve": "CVE-2015-6563",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6563"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-6563"
},
{
"cve": "CVE-2015-6564",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6564"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-6564"
},
{
"cve": "CVE-2015-6565",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6565"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-6565"
},
{
"cve": "CVE-2015-8325",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8325"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2015-8325"
},
{
"cve": "CVE-2016-0701",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0701"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0701"
},
{
"cve": "CVE-2016-0702",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0702"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0702"
},
{
"cve": "CVE-2016-0703",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0703"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0703"
},
{
"cve": "CVE-2016-0704",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0704"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0704"
},
{
"cve": "CVE-2016-0705",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2016-0777",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0777"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0777"
},
{
"cve": "CVE-2016-0778",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0778"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0778"
},
{
"cve": "CVE-2016-0797",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0797"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0797"
},
{
"cve": "CVE-2016-0798",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0798"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0798"
},
{
"cve": "CVE-2016-0799",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0799"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0799"
},
{
"cve": "CVE-2016-0800",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A cross-protocol attack was discovered that could allow an attacker to decrypt intercepted TLS sessions by using a server supporting SSLv2 as a Bleichenbacher RSA padding oracle.\nIn order to exploit the vulnerability, the attacker must have network access to the affected devices and must be in a privileged network position.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0800"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-0800"
},
{
"cve": "CVE-2016-1907",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1907"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-1907"
},
{
"cve": "CVE-2016-1908",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1908"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-1908"
},
{
"cve": "CVE-2016-2105",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2105"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2105"
},
{
"cve": "CVE-2016-2106",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2106"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2106"
},
{
"cve": "CVE-2016-2107",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2107"
},
{
"cve": "CVE-2016-2108",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2108"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2108"
},
{
"cve": "CVE-2016-2109",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2109"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2109"
},
{
"cve": "CVE-2016-2176",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2176"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2176"
},
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2179"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2180",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2180"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2180"
},
{
"cve": "CVE-2016-2181",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2181"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2183"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6210",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6210"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6210"
},
{
"cve": "CVE-2016-6302",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6303"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6305",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6305"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6305"
},
{
"cve": "CVE-2016-6306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6306"
},
{
"cve": "CVE-2016-6307",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6307"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6307"
},
{
"cve": "CVE-2016-6308",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"notes": [
{
"category": "summary",
"text": "statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6308"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6308"
},
{
"cve": "CVE-2016-6515",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6515"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-6515"
},
{
"cve": "CVE-2016-8858",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-8858"
},
{
"cve": "CVE-2016-10009",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10009"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10009"
},
{
"cve": "CVE-2016-10010",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10010"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10010"
},
{
"cve": "CVE-2016-10011",
"cwe": {
"id": "CWE-244",
"name": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10011"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10011"
},
{
"cve": "CVE-2016-10012",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10012"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2016-10012"
},
{
"cve": "CVE-2017-3735",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3735"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2017-3735"
},
{
"cve": "CVE-2017-15906",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "summary",
"text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15906"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2017-15906"
},
{
"cve": "CVE-2018-15473",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15473"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2018-15473"
},
{
"cve": "CVE-2018-20685",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20685"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2018-20685"
},
{
"cve": "CVE-2019-1552",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be \u0027/usr/local\u0027. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of \u0027C:/usr/local\u0027, which may be world writable, which enables untrusted users to modify OpenSSL\u0027s default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, \u0027/usr/local/ssl\u0027 is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1552"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-1552"
},
{
"cve": "CVE-2019-6109",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6109"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-6109"
},
{
"cve": "CVE-2019-6110",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6110"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-6110"
},
{
"cve": "CVE-2019-6111",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6111"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-6111"
},
{
"cve": "CVE-2019-16905",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
},
{
"category": "mitigation",
"details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005"
]
}
],
"title": "CVE-2019-16905"
}
]
}
ghsa-6x25-gfx2-5crp
Vulnerability from github
Published
2022-05-13 01:05
Modified
2022-05-13 01:05
Details
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
{
"affected": [],
"aliases": [
"CVE-2015-5600"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-08-03T01:59:00Z",
"severity": "HIGH"
},
"details": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"id": "GHSA-6x25-gfx2-5crp",
"modified": "2022-05-13T01:05:10Z",
"published": "2022-05-13T01:05:10Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
},
{
"type": "WEB",
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480"
},
{
"type": "WEB",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992"
},
{
"type": "WEB",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
},
{
"type": "WEB",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136"
},
{
"type": "WEB",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201512-04"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20151106-0001"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT205031"
},
{
"type": "WEB",
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12"
},
{
"type": "WEB",
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"type": "WEB",
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"type": "WEB",
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"type": "WEB",
"url": "http://openwall.com/lists/oss-security/2015/07/23/4"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0466.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2015/Jul/92"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/75990"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/91787"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/92012"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1032988"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2710-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2710-2"
}
],
"schema_version": "1.4.0",
"severity": []
}
rhsa-2015_2088
Vulnerability from csaf_redhat
Published
2015-11-19 03:38
Modified
2024-11-22 09:10
Summary
Red Hat Security Advisory: openssh security, bug fix, and enhancement update
Notes
Topic
Updated openssh packages that fix multiple security issues, several bugs,
and add various enhancements are now available for Red Hat Enterprise
Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
OpenSSH is OpenBSD's SSH (Secure Shell) protocol implementation. These
packages include the core files necessary for both the OpenSSH client and
server.
A flaw was found in the way OpenSSH handled PAM authentication when using
privilege separation. An attacker with valid credentials on the system and
able to fully compromise a non-privileged pre-authentication process using
a different flaw could use this flaw to authenticate as other users.
(CVE-2015-6563)
A use-after-free flaw was found in OpenSSH. An attacker able to fully
compromise a non-privileged pre-authentication process using a different
flaw could possibly cause sshd to crash or execute arbitrary code with
root privileges. (CVE-2015-6564)
It was discovered that the OpenSSH sshd daemon did not check the list of
keyboard-interactive authentication methods for duplicates. A remote
attacker could use this flaw to bypass the MaxAuthTries limit, making it
easier to perform password guessing attacks. (CVE-2015-5600)
It was found that the OpenSSH ssh-agent, a program to hold private keys
used for public key authentication, was vulnerable to password guessing
attacks. An attacker able to connect to the agent could use this flaw to
conduct a brute-force attack to unlock keys in the ssh-agent. (BZ#1238238)
This update fixes the following bugs:
* Previously, the sshd_config(5) man page was misleading and could thus
confuse the user. This update improves the man page text to clearly
describe the AllowGroups feature. (BZ#1150007)
* The limit for the function for restricting the number of files listed using the wildcard character (*) that prevents the Denial of Service (DoS) for both server and client was previously set too low. Consequently, the user reaching the limit was prevented from listing a directory with a large number of files over Secure File Transfer Protocol (SFTP). This update increases the aforementioned limit, thus fixing this bug. (BZ#1160377)
* When the ForceCommand option with a pseudoterminal was used and the
MaxSession option was set to "2", multiplexed SSH connections did not work
as expected. After the user attempted to open a second multiplexed
connection, the attempt failed if the first connection was still open. This
update modifies OpenSSH to issue only one audit message per session, and
the user is thus able to open two multiplexed connections in this
situation. (BZ#1199112)
* The ssh-copy-id utility failed if the account on the remote server did
not use an sh-like shell. Remote commands have been modified to run in an
sh-like shell, and ssh-copy-id now works also with non-sh-like shells.
(BZ#1201758)
* Due to a race condition between auditing messages and answers when using
ControlMaster multiplexing, one session in the shared connection randomly
and unexpectedly exited the connection. This update fixes the race
condition in the auditing code, and multiplexing connections now work as
expected even with a number of sessions created at once. (BZ#1240613)
In addition, this update adds the following enhancements:
* As not all Lightweight Directory Access Protocol (LDAP) servers possess
a default schema, as expected by the ssh-ldap-helper program, this update
provides the user with an ability to adjust the LDAP query to get public
keys from servers with a different schema, while the default functionality
stays untouched. (BZ#1201753)
* With this enhancement update, the administrator is able to set
permissions for files uploaded using Secure File Transfer Protocol (SFTP).
(BZ#1197989)
* This update provides the LDAP schema in LDAP Data Interchange Format (LDIF) format as a complement to the old schema previously accepted
by OpenLDAP. (BZ#1184938)
* With this update, the user can selectively disable the Generic Security
Services API (GSSAPI) key exchange algorithms as any normal key exchange.
(BZ#1253062)
Users of openssh are advised to upgrade to these updated packages, which
correct these issues and add these enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openssh packages that fix multiple security issues, several bugs,\nand add various enhancements are now available for Red Hat Enterprise\nLinux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSH is OpenBSD\u0027s SSH (Secure Shell) protocol implementation. These\npackages include the core files necessary for both the OpenSSH client and\nserver.\n\nA flaw was found in the way OpenSSH handled PAM authentication when using\nprivilege separation. An attacker with valid credentials on the system and\nable to fully compromise a non-privileged pre-authentication process using\na different flaw could use this flaw to authenticate as other users.\n(CVE-2015-6563)\n\nA use-after-free flaw was found in OpenSSH. An attacker able to fully\ncompromise a non-privileged pre-authentication process using a different\nflaw could possibly cause sshd to crash or execute arbitrary code with\nroot privileges. (CVE-2015-6564)\n\nIt was discovered that the OpenSSH sshd daemon did not check the list of\nkeyboard-interactive authentication methods for duplicates. A remote\nattacker could use this flaw to bypass the MaxAuthTries limit, making it\neasier to perform password guessing attacks. (CVE-2015-5600)\n\nIt was found that the OpenSSH ssh-agent, a program to hold private keys\nused for public key authentication, was vulnerable to password guessing\nattacks. An attacker able to connect to the agent could use this flaw to\nconduct a brute-force attack to unlock keys in the ssh-agent. (BZ#1238238)\n\nThis update fixes the following bugs:\n\n* Previously, the sshd_config(5) man page was misleading and could thus\nconfuse the user. This update improves the man page text to clearly\ndescribe the AllowGroups feature. (BZ#1150007)\n\n* The limit for the function for restricting the number of files listed using the wildcard character (*) that prevents the Denial of Service (DoS) for both server and client was previously set too low. Consequently, the user reaching the limit was prevented from listing a directory with a large number of files over Secure File Transfer Protocol (SFTP). This update increases the aforementioned limit, thus fixing this bug. (BZ#1160377)\n\n* When the ForceCommand option with a pseudoterminal was used and the\nMaxSession option was set to \"2\", multiplexed SSH connections did not work\nas expected. After the user attempted to open a second multiplexed\nconnection, the attempt failed if the first connection was still open. This\nupdate modifies OpenSSH to issue only one audit message per session, and\nthe user is thus able to open two multiplexed connections in this\nsituation. (BZ#1199112)\n\n* The ssh-copy-id utility failed if the account on the remote server did\nnot use an sh-like shell. Remote commands have been modified to run in an\nsh-like shell, and ssh-copy-id now works also with non-sh-like shells.\n(BZ#1201758)\n\n* Due to a race condition between auditing messages and answers when using\nControlMaster multiplexing, one session in the shared connection randomly\nand unexpectedly exited the connection. This update fixes the race\ncondition in the auditing code, and multiplexing connections now work as\nexpected even with a number of sessions created at once. (BZ#1240613)\n\nIn addition, this update adds the following enhancements:\n\n* As not all Lightweight Directory Access Protocol (LDAP) servers possess\na default schema, as expected by the ssh-ldap-helper program, this update\nprovides the user with an ability to adjust the LDAP query to get public\nkeys from servers with a different schema, while the default functionality\nstays untouched. (BZ#1201753)\n\n* With this enhancement update, the administrator is able to set\npermissions for files uploaded using Secure File Transfer Protocol (SFTP).\n(BZ#1197989)\n\n* This update provides the LDAP schema in LDAP Data Interchange Format (LDIF) format as a complement to the old schema previously accepted\nby OpenLDAP. (BZ#1184938)\n\n* With this update, the user can selectively disable the Generic Security\nServices API (GSSAPI) key exchange algorithms as any normal key exchange.\n(BZ#1253062)\n\nUsers of openssh are advised to upgrade to these updated packages, which\ncorrect these issues and add these enhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:2088",
"url": "https://access.redhat.com/errata/RHSA-2015:2088"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1125110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1125110"
},
{
"category": "external",
"summary": "1160377",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1160377"
},
{
"category": "external",
"summary": "1178116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1178116"
},
{
"category": "external",
"summary": "1181591",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1181591"
},
{
"category": "external",
"summary": "1184938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184938"
},
{
"category": "external",
"summary": "1187597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1187597"
},
{
"category": "external",
"summary": "1197666",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1197666"
},
{
"category": "external",
"summary": "1197989",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1197989"
},
{
"category": "external",
"summary": "1238238",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1238238"
},
{
"category": "external",
"summary": "1245969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1245969"
},
{
"category": "external",
"summary": "1252844",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1252844"
},
{
"category": "external",
"summary": "1252852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1252852"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2088.json"
}
],
"title": "Red Hat Security Advisory: openssh security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T09:10:04+00:00",
"generator": {
"date": "2024-11-22T09:10:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:2088",
"initial_release_date": "2015-11-19T03:38:51+00:00",
"revision_history": [
{
"date": "2015-11-19T03:38:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-11-19T03:38:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T09:10:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@6.6.1p1-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"product": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"product_id": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-sysvinit@6.6.1p1-22.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-0:6.6.1p1-22.el7.src",
"product": {
"name": "openssh-0:6.6.1p1-22.el7.src",
"product_id": "openssh-0:6.6.1p1-22.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@6.6.1p1-22.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-sysvinit@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@6.6.1p1-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:6.6.1p1-22.el7.s390x",
"product": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x",
"product_id": "openssh-server-0:6.6.1p1-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@6.6.1p1-22.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=s390"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-sysvinit@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@6.6.1p1-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"product": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"product_id": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@6.6.1p1-22.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-sysvinit@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@6.6.1p1-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"product": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"product_id": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@6.6.1p1-22.el7?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"product_id": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-9.22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-sysvinit@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@6.6.1p1-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"product": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"product_id": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@6.6.1p1-22.el7?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-0:6.6.1p1-22.el7.src"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.src",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-clients-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64"
},
"product_reference": "openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5600",
"cwe": {
"id": "CWE-304",
"name": "Missing Critical Step in Authentication"
},
"discovery_date": "2015-07-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1245969"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the OpenSSH sshd daemon did not check the list of keyboard-interactive authentication methods for duplicates. A remote attacker could use this flaw to bypass the MaxAuthTries limit, making it easier to perform password guessing attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the default OpenSSH sshd configuration in Red Hat Enterprise Linux 4, 5, 6 and 7.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5600"
},
{
"category": "external",
"summary": "RHBZ#1245969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1245969"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5600",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600"
},
{
"category": "external",
"summary": "https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/",
"url": "https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/"
}
],
"release_date": "2015-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T03:38:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2088"
},
{
"category": "workaround",
"details": "This issue can be mitigated by disabling keyboard-interactive authentication method. That can be achieved by setting \"ChallengeResponseAuthentication no\" in the /etc/ssh/sshd_config configuration file and restarting the sshd service.",
"product_ids": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices"
},
{
"cve": "CVE-2015-6563",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2015-08-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1252844"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way OpenSSH handled PAM authentication when using privilege separation. An attacker with valid credentials on the system and able to fully compromise a non-privileged pre-authentication process using a different flaw could use this flaw to authenticate as other users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: Privilege separation weakness related to PAM support",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-6563"
},
{
"category": "external",
"summary": "RHBZ#1252844",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1252844"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-6563",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6563"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6563",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6563"
},
{
"category": "external",
"summary": "http://www.openssh.com/txt/release-7.0",
"url": "http://www.openssh.com/txt/release-7.0"
}
],
"release_date": "2015-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T03:38:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: Privilege separation weakness related to PAM support"
},
{
"cve": "CVE-2015-6564",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2015-08-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1252852"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in OpenSSH. An attacker able to fully compromise a non-privileged pre-authentication process using a different flaw could possibly cause sshd to crash or execute arbitrary code with root privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: Use-after-free bug related to PAM support",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-6564"
},
{
"category": "external",
"summary": "RHBZ#1252852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1252852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-6564",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6564"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-6564",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6564"
},
{
"category": "external",
"summary": "http://www.openssh.com/txt/release-7.0",
"url": "http://www.openssh.com/txt/release-7.0"
}
],
"release_date": "2015-08-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T03:38:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-0:6.6.1p1-22.el7.src",
"7Client-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Client:openssh-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-0:6.6.1p1-22.el7.src",
"7Client:openssh-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Client:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Client:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.src",
"7ComputeNode:openssh-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7ComputeNode:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7ComputeNode:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-0:6.6.1p1-22.el7.src",
"7Server-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Server:openssh-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-0:6.6.1p1-22.el7.src",
"7Server:openssh-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Server:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Server:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.src",
"7Workstation-optional:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation-optional:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation-optional:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64",
"7Workstation:openssh-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-0:6.6.1p1-22.el7.src",
"7Workstation:openssh-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-askpass-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-clients-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.i686",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-debuginfo-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-keycat-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-ldap-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-0:6.6.1p1-22.el7.x86_64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.aarch64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.ppc64le",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.s390x",
"7Workstation:openssh-server-sysvinit-0:6.6.1p1-22.el7.x86_64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.aarch64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.i686",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.ppc64le",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.s390x",
"7Workstation:pam_ssh_agent_auth-0:0.9.3-9.22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: Use-after-free bug related to PAM support"
}
]
}
rhsa-2016_0466
Vulnerability from csaf_redhat
Published
2016-03-21 20:18
Modified
2024-11-22 09:57
Summary
Red Hat Security Advisory: openssh security update
Notes
Topic
Updated openssh packages that fix two security issues are now available
for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
OpenSSH is OpenBSD's SSH (Secure Shell) protocol implementation.
These packages include the core files necessary for both the OpenSSH client
and server.
It was discovered that the OpenSSH server did not sanitize data received
in requests to enable X11 forwarding. An authenticated client with
restricted SSH access could possibly use this flaw to bypass intended
restrictions. (CVE-2016-3115)
It was discovered that the OpenSSH sshd daemon did not check the list of
keyboard-interactive authentication methods for duplicates. A remote
attacker could use this flaw to bypass the MaxAuthTries limit, making it
easier to perform password guessing attacks. (CVE-2015-5600)
All openssh users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. After installing this
update, the OpenSSH server daemon (sshd) will be restarted automatically.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated openssh packages that fix two security issues are now available\nfor Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSH is OpenBSD\u0027s SSH (Secure Shell) protocol implementation.\nThese packages include the core files necessary for both the OpenSSH client\nand server.\n\nIt was discovered that the OpenSSH server did not sanitize data received\nin requests to enable X11 forwarding. An authenticated client with\nrestricted SSH access could possibly use this flaw to bypass intended\nrestrictions. (CVE-2016-3115)\n\nIt was discovered that the OpenSSH sshd daemon did not check the list of\nkeyboard-interactive authentication methods for duplicates. A remote\nattacker could use this flaw to bypass the MaxAuthTries limit, making it\neasier to perform password guessing attacks. (CVE-2015-5600)\n\nAll openssh users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. After installing this\nupdate, the OpenSSH server daemon (sshd) will be restarted automatically.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0466",
"url": "https://access.redhat.com/errata/RHSA-2016:0466"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1245969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1245969"
},
{
"category": "external",
"summary": "1316829",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1316829"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0466.json"
}
],
"title": "Red Hat Security Advisory: openssh security update",
"tracking": {
"current_release_date": "2024-11-22T09:57:02+00:00",
"generator": {
"date": "2024-11-22T09:57:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:0466",
"initial_release_date": "2016-03-21T20:18:13+00:00",
"revision_history": [
{
"date": "2016-03-21T20:18:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-03-21T20:18:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T09:57:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-server-0:5.3p1-114.el6_7.i686",
"product": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686",
"product_id": "openssh-server-0:5.3p1-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@5.3p1-114.el6_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:5.3p1-114.el6_7.i686",
"product": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686",
"product_id": "openssh-clients-0:5.3p1-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@5.3p1-114.el6_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssh-0:5.3p1-114.el6_7.i686",
"product": {
"name": "openssh-0:5.3p1-114.el6_7.i686",
"product_id": "openssh-0:5.3p1-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@5.3p1-114.el6_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"product": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"product_id": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@5.3p1-114.el6_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"product": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"product_id": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@5.3p1-114.el6_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"product_id": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-114.el6_7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"product": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"product_id": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@5.3p1-114.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-0:5.3p1-114.el6_7.src",
"product": {
"name": "openssh-0:5.3p1-114.el6_7.src",
"product_id": "openssh-0:5.3p1-114.el6_7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@5.3p1-114.el6_7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"product": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"product_id": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@5.3p1-114.el6_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:5.3p1-114.el6_7.x86_64",
"product": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64",
"product_id": "openssh-0:5.3p1-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@5.3p1-114.el6_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"product": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"product_id": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@5.3p1-114.el6_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"product": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"product_id": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@5.3p1-114.el6_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"product": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"product_id": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@5.3p1-114.el6_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"product_id": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-114.el6_7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"product": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"product_id": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@5.3p1-114.el6_7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"product": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"product_id": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@5.3p1-114.el6_7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"product_id": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-114.el6_7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"product": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"product_id": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@5.3p1-114.el6_7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"product": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"product_id": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@5.3p1-114.el6_7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"product": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"product_id": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@5.3p1-114.el6_7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"product": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"product_id": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@5.3p1-114.el6_7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:5.3p1-114.el6_7.ppc64",
"product": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64",
"product_id": "openssh-0:5.3p1-114.el6_7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@5.3p1-114.el6_7?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"product": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"product_id": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@5.3p1-114.el6_7?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"product_id": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-114.el6_7?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"product": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"product_id": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@5.3p1-114.el6_7?arch=s390"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"product_id": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-114.el6_7?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"product": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"product_id": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-ldap@5.3p1-114.el6_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"product": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"product_id": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.9.3-114.el6_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"product": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"product_id": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@5.3p1-114.el6_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"product": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"product_id": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@5.3p1-114.el6_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:5.3p1-114.el6_7.s390x",
"product": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x",
"product_id": "openssh-server-0:5.3p1-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@5.3p1-114.el6_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-0:5.3p1-114.el6_7.s390x",
"product": {
"name": "openssh-0:5.3p1-114.el6_7.s390x",
"product_id": "openssh-0:5.3p1-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@5.3p1-114.el6_7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"product": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"product_id": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@5.3p1-114.el6_7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6Client-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6ComputeNode-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6Server-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.src",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-clients-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-ldap-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:5.3p1-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64"
},
"product_reference": "openssh-server-0:5.3p1-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
},
"product_reference": "pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5600",
"cwe": {
"id": "CWE-304",
"name": "Missing Critical Step in Authentication"
},
"discovery_date": "2015-07-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1245969"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the OpenSSH sshd daemon did not check the list of keyboard-interactive authentication methods for duplicates. A remote attacker could use this flaw to bypass the MaxAuthTries limit, making it easier to perform password guessing attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the default OpenSSH sshd configuration in Red Hat Enterprise Linux 4, 5, 6 and 7.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-5600"
},
{
"category": "external",
"summary": "RHBZ#1245969",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1245969"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-5600",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5600"
},
{
"category": "external",
"summary": "https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/",
"url": "https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/"
}
],
"release_date": "2015-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-21T20:18:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0466"
},
{
"category": "workaround",
"details": "This issue can be mitigated by disabling keyboard-interactive authentication method. That can be achieved by setting \"ChallengeResponseAuthentication no\" in the /etc/ssh/sshd_config configuration file and restarting the sshd service.",
"product_ids": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices"
},
{
"cve": "CVE-2016-3115",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-03-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1316829"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the OpenSSH server did not sanitize data received in requests to enable X11 forwarding. An authenticated client with restricted SSH access could possibly use this flaw to bypass intended restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: missing sanitisation of input for X11 forwarding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-3115"
},
{
"category": "external",
"summary": "RHBZ#1316829",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1316829"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-3115",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-3115",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-3115"
},
{
"category": "external",
"summary": "http://www.openssh.com/txt/x11fwd.adv",
"url": "http://www.openssh.com/txt/x11fwd.adv"
}
],
"release_date": "2016-03-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-03-21T20:18:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0466"
},
{
"category": "workaround",
"details": "Set X11Forwarding=no in sshd_config.\n\nFor authorized_keys that specify a \"command\" restriction, this issue can be mitigated by also setting the \"no-X11-forwarding\" restriction. In OpenSSH 7.2 and later, the \"restrict\" restriction can be used instead, which includes the \"no-X11-forwarding\" restriction.",
"product_ids": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Client-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Client-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Client-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6ComputeNode-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6ComputeNode-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Server-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Server-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Server-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.src",
"6Workstation-optional-6.7.z:openssh-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-askpass-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-clients-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-debuginfo-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-ldap-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.i686",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.s390x",
"6Workstation-optional-6.7.z:openssh-server-0:5.3p1-114.el6_7.x86_64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.i686",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.ppc64",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.s390x",
"6Workstation-optional-6.7.z:pam_ssh_agent_auth-0:0.9.3-114.el6_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: missing sanitisation of input for X11 forwarding"
}
]
}
gsd-2015-5600
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2015-5600",
"description": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"id": "GSD-2015-5600",
"references": [
"https://www.suse.com/security/cve/CVE-2015-5600.html",
"https://access.redhat.com/errata/RHSA-2016:0466",
"https://access.redhat.com/errata/RHSA-2015:2088",
"https://ubuntu.com/security/CVE-2015-5600",
"https://advisories.mageia.org/CVE-2015-5600.html",
"https://alas.aws.amazon.com/cve/html/CVE-2015-5600.html",
"https://linux.oracle.com/cve/CVE-2015-5600.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-5600"
],
"details": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"id": "GSD-2015-5600",
"modified": "2023-12-13T01:20:06.221808Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-5600",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"name": "USN-2710-2",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2710-2"
},
{
"name": "FEDORA-2015-13469",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"name": "GLSA-201512-04",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201512-04"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136"
},
{
"name": "https://security.netapp.com/advisory/ntap-20151106-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20151106-0001/"
},
{
"name": "RHSA-2016:0466",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0466.html"
},
{
"name": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h",
"refsource": "CONFIRM",
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697",
"refsource": "CONFIRM",
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697"
},
{
"name": "APPLE-SA-2015-08-13-2",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
},
{
"name": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c",
"refsource": "CONFIRM",
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157"
},
{
"name": "75990",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/75990"
},
{
"name": "91787",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/91787"
},
{
"name": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480",
"refsource": "CONFIRM",
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480"
},
{
"name": "SUSE-SU-2015:1581",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"name": "92012",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/92012"
},
{
"name": "https://support.apple.com/kb/HT205031",
"refsource": "CONFIRM",
"url": "https://support.apple.com/kb/HT205031"
},
{
"name": "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html"
},
{
"name": "[oss-security] 20150723 Re: CVE Request for OpenSSH vulnerability - authentication limits bypass",
"refsource": "MLIST",
"url": "http://openwall.com/lists/oss-security/2015/07/23/4"
},
{
"name": "USN-2710-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-2710-1"
},
{
"name": "FEDORA-2015-11981",
"refsource": "FEDORA",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html"
},
{
"name": "1032988",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1032988"
},
{
"name": "20150717 OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass)",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2015/Jul/92"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"name": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12",
"refsource": "MISC",
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "6.9",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-5600"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h",
"refsource": "CONFIRM",
"tags": [],
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"name": "[oss-security] 20150723 Re: CVE Request for OpenSSH vulnerability - authentication limits bypass",
"refsource": "MLIST",
"tags": [],
"url": "http://openwall.com/lists/oss-security/2015/07/23/4"
},
{
"name": "20150717 OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass)",
"refsource": "FULLDISC",
"tags": [
"Exploit"
],
"url": "http://seclists.org/fulldisclosure/2015/Jul/92"
},
{
"name": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c",
"refsource": "CONFIRM",
"tags": [],
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"name": "APPLE-SA-2015-08-13-2",
"refsource": "APPLE",
"tags": [],
"url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
},
{
"name": "FEDORA-2015-11981",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html"
},
{
"name": "https://support.apple.com/kb/HT205031",
"refsource": "CONFIRM",
"tags": [],
"url": "https://support.apple.com/kb/HT205031"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667",
"refsource": "CONFIRM",
"tags": [],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992",
"refsource": "CONFIRM",
"tags": [],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992"
},
{
"name": "91787",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"name": "75990",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/75990"
},
{
"name": "92012",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/92012"
},
{
"name": "RHSA-2016:0466",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0466.html"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157",
"refsource": "CONFIRM",
"tags": [],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10157"
},
{
"name": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480",
"refsource": "CONFIRM",
"tags": [],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480"
},
{
"name": "GLSA-201512-04",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201512-04"
},
{
"name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697",
"refsource": "CONFIRM",
"tags": [],
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10697"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136",
"refsource": "CONFIRM",
"tags": [],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10136"
},
{
"name": "SUSE-SU-2015:1581",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"name": "FEDORA-2015-13469",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html"
},
{
"name": "USN-2710-2",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-2710-2"
},
{
"name": "USN-2710-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-2710-1"
},
{
"name": "1032988",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1032988"
},
{
"name": "https://security.netapp.com/advisory/ntap-20151106-0001/",
"refsource": "CONFIRM",
"tags": [],
"url": "https://security.netapp.com/advisory/ntap-20151106-0001/"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html"
},
{
"name": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12",
"refsource": "MISC",
"tags": [],
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
"refsource": "CONFIRM",
"tags": [],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 8.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 7.8,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2022-12-13T12:15Z",
"publishedDate": "2015-08-03T01:59Z"
}
}
}
var-201508-0620
Vulnerability from variot
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. Openssh of sshd of auth2-chall.c Inside kbdint_next_device The function is a keyboard interaction within a single connection (keyboard-interactive) The brute force is not adequately restricted for device processing. (brute-force) Attacks or service disruption (CPU Resource consumption ) There are vulnerabilities that are put into a state.By a third party ssh of -oKbdInteractiveDevices Brute force through an overly long and redundant list of options (brute-force) Attacks or service disruption (CPU Resource consumption ) There is a possibility of being put into a state. OpenSSH is prone to a security-bypass weakness. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. These vulnerabilities include:
The SSLv3 vulnerability known as "Padding Oracle on Downgraded Legacy Encryption" also known as "POODLE", which could be exploited remotely resulting in disclosure of information. The following firmware versions of Virtual Connect (VC) are impacted:
HPE BladeSystem c-Class Virtual Connect (VC) Firmware 4.30 through VC 4.45 HPE BladeSystem c-Class Virtual Connect (VC) Firmware 3.62 through VC 4.21
Note: Firmware versions 3.62 through 4.21 are not impacted by CVE-2016-0800, CVE-2015-3194, CVE-2014-3566, CVE-2015-0705, CVE-2016-0799, and CVE-2016-2842. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
============================================================================= FreeBSD-SA-15:16.openssh Security Advisory The FreeBSD Project
Topic: OpenSSH multiple vulnerabilities
Category: contrib Module: openssh Announced: 2015-07-28, revised on 2015-07-30 Affects: All supported versions of FreeBSD. Corrected: 2015-07-28 19:58:44 UTC (stable/10, 10.2-PRERELEASE) 2015-07-28 19:58:44 UTC (stable/10, 10.2-BETA2-p2) 2015-07-28 19:59:04 UTC (releng/10.2, 10.2-RC1-p1) 2015-07-28 19:59:11 UTC (releng/10.1, 10.1-RELEASE-p16) 2015-07-28 19:58:54 UTC (stable/9, 9.3-STABLE) 2015-07-28 19:59:22 UTC (releng/9.3, 9.3-RELEASE-p21) 2015-07-30 10:09:07 UTC (stable/8, 8.4-STABLE) 2015-07-30 10:09:31 UTC (releng/8.4, 8.4-RELEASE-p36) CVE Name: CVE-2014-2653, CVE-2015-5600
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit
- Revision history
v1.0 2015-02-25 Initial release. v1.1 2015-07-30 Revised patch for FreeBSD 8.x to address regression when keyboard interactive authentication is used.
I. Background
OpenSSH is an implementation of the SSH protocol suite, providing an encrypted and authenticated transport for a variety of services, including remote shell access.
The security of the SSH connection relies on the server authenticating itself to the client as well as the user authenticating itself to the server. SSH servers uses host keys to verify their identity.
RFC 4255 has defined a method of verifying SSH host keys using Domain Name System Security (DNSSEC), by publishing the key fingerprint using DNS with "SSHFP" resource record. RFC 6187 has defined methods to use a signature by a trusted certification authority to bind a given public key to a given digital identity with X.509v3 certificates.
The PAM (Pluggable Authentication Modules) library provides a flexible framework for user authentication and session setup / teardown.
OpenSSH uses PAM for password authentication by default.
II. Problem Description
OpenSSH clients does not correctly verify DNS SSHFP records when a server offers a certificate. [CVE-2014-2653]
OpenSSH servers which are configured to allow password authentication using PAM (default) would allow many password attempts.
III. Impact
A malicious server may be able to force a connecting client to skip DNS SSHFP record check and require the user to perform manual host verification of the host key fingerprint. This could allow man-in-the-middle attack if the user does not carefully check the fingerprint. [CVE-2014-2653]
A remote attacker may effectively bypass MaxAuthTries settings, which would enable them to brute force passwords. [CVE-2015-5600]
IV. Workaround
Systems that do not use OpenSSH are not affected.
There is no workaround for CVE-2014-2653, but the problem only affects networks where DNSsec and SSHFP is properly configured. Users who uses SSH should always check server host key fingerprints carefully when prompted.
System administrators can set:
UsePAM no
In their /etc/ssh/sshd_config and restart sshd service to workaround the problem described as CVE-2015-5600 at expense of losing features provided by the PAM framework.
We recommend system administrators to disable password based authentication completely, and use key based authentication exclusively in their SSH server configuration, when possible. This would eliminate the possibility of being ever exposed to password brute force attack.
V. Solution
Perform one of the following:
1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.
SSH service has to be restarted after the update. A reboot is recommended but not required.
2) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:
freebsd-update fetch
freebsd-update install
SSH service has to be restarted after the update. A reboot is recommended but not required.
3) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.
[FreeBSD 9.3, 10.1, 10.2]
fetch https://security.FreeBSD.org/patches/SA-15:16/openssh.patch
fetch https://security.FreeBSD.org/patches/SA-15:16/openssh.patch.asc
gpg --verify openssh.patch.asc
[FreeBSD 8.4]
fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8.patch
fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8.patch.asc
gpg --verify openssh-8.patch.asc
fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8-errata.patc
fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8-errata.patch.asc
gpg --verify openssh-8-errata.patch.asc
b) Apply the patch. Execute the following commands as root:
cd /usr/src
patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as
described in
Restart the SSH service, or reboot the system.
VI. Correction details
The following list contains the correction revision numbers for each affected branch.
Branch/path Revision
stable/8/ r286067 releng/8.4/ r286068 stable/9/ r285977 releng/9.3/ r285980 stable/10/ r285976 releng/10.1/ r285979 releng/10.2/ r285978
To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:
svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
VII. References
The latest revision of this advisory is available at
iQIcBAEBCgAGBQJVufuCAAoJEO1n7NZdz2rnHHAQALfjXH/WyrgpHxw1YFipwFSD bl+HLbdvMVbfBxLV7eVBK9RPQiyoxwocmU0uMdiNEIWt2llczTLEl/wtUjj6f4Ko K6E7AAOgOX4zdQxBd2502FvXC1oNbDEvK8X3M4MzPHAG4QRgXNffRGYvClmbayck 2i+bjcHdKAEwFJjHk4wXOQ0yhdF6Q36bH0N3kPV9z7sAt3tuzSWhvtX6QQSyeuCJ ie2db9CdSUnFhYELJnVMpVTf3ppMqUT6QEe45LmsGA6F8yWdMaW2vtMdJq6xFVYP INCUVyOlDRu0TibjLUpXu4KugeDgyTXy9oz4SRdnpcUWz33fM6aSgOkpiM1h05ja BJrs0HZbkjCwtD+8a0buoyIKb9NBIsDKbrec5g8AEDkAHjRzraLGAXUYwkFeyqYJ j+ll5r5iu5fc4s8QM+ySlGCW8V9Ix8FX7Rr7FhAWLSKEldDsnCRjG4EfrAcd1HiC PleAnLv4uKwfSugIBIEs5ls7+TzWytW8nnEpMEerXUD894suFIycOT6eoUYF/CCT I1nHWSITw4HSj8+wBvrhxwZCRqIMOAZB+3jzrwRE+QZkghoWnPnqrCn9uLkdndq5 ewgz6PiuYC8Zx0Z6trA72oV+XjTKu2d6eO5tRpe9aAmhPmfBWg3fXYltVzTzF9IE r0z98qmTEPiTDi8dr+K/ =GsXJ -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n a-c05128992
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c05128992 Version: 1
HPSBST03599 rev.1 - HPE 3PAR OS running OpenSSH, Remote Denial of Service (DoS), Access Restriction Bypass
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2016-05-11 Last Updated: 2016-05-11
Potential Security Impact: Remote Access Restriction Bypass, Denial of Service (DoS)
Source: Hewlett Packard Enterprise, Product Security Response Team
VULNERABILITY SUMMARY A vulnerability in OpenSSH has been addressed by HPE 3PAR OS. The vulnerabily could be exploited remotely resulting in Denial of Service (DoS) or access restriction bypass.
References:
- CVE-2015-5600
- PSRT110106
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. HPE 3PAR OS versions 3.1.3 and later, prior to 3.2.1 MU5 and 3.2.2 MU2 running OpenSSH
BACKGROUND
CVSS 2.0 Base Metrics
Reference Base Vector Base Score CVE-2015-5600 (AV:N/AC:L/Au:N/C:P/I:N/A:C) 8.5 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002
RESOLUTION
HPE has provided the following software updates and mitigation information to resolve the vulnerability in 3PAR OS running OpenSSH.
-
3PAR OS 3.2.1 MU5 and 3.2.2 MU2
- HPE recommends prior impacted versions update to 3PAR OS 3.2.1 MU5 or 3.2.2 MU2.
-
3PAR OS 3.1.3 is also vulnerable but will not be fixed.
Mitigation: The best protection to guard against exploitation of this vulnerability is to securely configure and operate the storage array in accordance with the HPE 3PAR Configuration Guidelines documentation. Please contact HPE Technical Support for assistance.
HISTORY Version:1 (rev.1) - 11 May 2016 Initial release
Third Party Security Patches: Third party security patches that are to be installed on systems running Hewlett Packard Enterprise (HPE) software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HPE Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hpe.com.
Report: To report a potential security vulnerability with any HPE supported product, send Email to: security-alert@hpe.com
Subscribe: To initiate a subscription to receive future HPE Security Bulletin alerts via Email: http://www.hpe.com/support/Subscriber_Choice
Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://www.hpe.com/support/Security_Bulletin_Archive
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
3C = 3COM 3P = 3rd Party Software GN = HPE General Software HF = HPE Hardware and Firmware MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PV = ProCurve ST = Storage Software UX = HP-UX
Copyright 2016 Hewlett Packard Enterprise
Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett Packard Enterprise and the names of Hewlett Packard Enterprise products referenced herein are trademarks of Hewlett Packard Enterprise in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. ============================================================================ Ubuntu Security Notice USN-2710-2 August 18, 2015
openssh regression
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.04
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
Summary:
USN-2710-1 introduced a regression in OpenSSH. The upstream fix for CVE-2015-5600 caused a regression resulting in random authentication failures in non-default configurations. This update fixes the problem.
Original advisory details:
Moritz Jodeit discovered that OpenSSH incorrectly handled usernames when using PAM authentication. If an additional vulnerability were discovered in the OpenSSH unprivileged child process, this issue could allow a remote attacker to perform user impersonation. (CVE number pending) Moritz Jodeit discovered that OpenSSH incorrectly handled context memory when using PAM authentication. If an additional vulnerability were discovered in the OpenSSH unprivileged child process, this issue could allow a remote attacker to bypass authentication or possibly execute arbitrary code. (CVE number pending) Jann Horn discovered that OpenSSH incorrectly handled time windows for X connections. (CVE-2015-5352) It was discovered that OpenSSH incorrectly handled keyboard-interactive authentication. (CVE-2015-5600)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 15.04: openssh-server 1:6.7p1-5ubuntu1.3
Ubuntu 14.04 LTS: openssh-server 1:6.6p1-2ubuntu2.3
Ubuntu 12.04 LTS: openssh-server 1:5.9p1-5ubuntu1.7
In general, a standard system update will make all the necessary changes.
References: http://www.ubuntu.com/usn/usn-2710-2 http://www.ubuntu.com/usn/usn-2710-1 https://launchpad.net/bugs/1485719
Package Information: https://launchpad.net/ubuntu/+source/openssh/1:6.7p1-5ubuntu1.3 https://launchpad.net/ubuntu/+source/openssh/1:6.6p1-2ubuntu2.3 https://launchpad.net/ubuntu/+source/openssh/1:5.9p1-5ubuntu1.7 . VCX prior to 9.8.18 with OpenSSH or ISC BIND.
-
VCX 9.8.18 for the following Products/SKUs:
-
J9672A HP VCX V7205 Platform w/ DL360 G7 Srvr
- J9668A HP VCX IPC V7005 Pltfrm w/ DL120 G6 Srvr
- JC517A HP VCX V7205 Platform w/DL 360 G6 Server
- JE355A HP VCX V6000 Branch Platform 9.0
- JC516A HP VCX V7005 Platform w/DL 120 G6 Server
- JC518A HP VCX Connect 200 Primry 120 G6 Server
- J9669A HP VCX IPC V7310 Pltfrm w/ DL360 G7 Srvr
- JE341A HP VCX Connect 100 Secondary
- JE252A HP VCX Connect Primary MIM Module
- JE253A HP VCX Connect Secondary MIM Module
- JE254A HP VCX Branch MIM Module
- JE355A HP VCX V6000 Branch Platform 9.0
- JD028A HP MS30-40 RTR w/VCX + T1/FXO/FXS/Mod
- JD023A HP MSR30-40 Router with VCX MIM Module
- JD024A HP MSR30-16 RTR w/VCX Ent Br Com MIM
- JD025A HP MSR30-16 RTR w/VCX + 4FXO/2FXS Mod
- JD026A HP MSR30-16 RTR w/VCX + 8FXO/4FXS Mod
- JD027A HP MSR30-16 RTR w/VCX + 8BRI/4FXS Mod
- JD029A HP MSR30-16 RTR w/VCX + E1/4BRI/4FXS
- JE340A HP VCX Connect 100 Pri Server 9.0
- JE342A HP VCX Connect 100 Sec Server 9.0
HISTORY Version:1 (rev.1) - 28 January 2016 Initial release
Third Party Security Patches: Third party security patches that are to be installed on systems running Hewlett Packard Enterprise (HPE) software products should be applied in accordance with the customer's patch management policy. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201512-04
https://security.gentoo.org/
Severity: Normal Title: OpenSSH: Multiple vulnerabilities Date: December 20, 2015 Bugs: #553724, #555518, #557340 ID: 201512-04
Synopsis
Multiple vulnerabilities have been found in OpenSSH, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-misc/openssh < 7.1_p1-r2 >= 7.1_p1-r2
Description
Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details.
Impact
Workaround
There is no known workaround at this time.
Resolution
All OpenSSH users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/openssh-6.9_p1-r2"
References
[ 1 ] CVE-2015-5352 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5352 [ 2 ] CVE-2015-5600 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5600 [ 3 ] CVE-2015-6563 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6563 [ 4 ] CVE-2015-6564 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6564 [ 5 ] CVE-2015-6565 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6565
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201512-04
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201508-0620",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "openssh",
"scope": "lte",
"trust": 1.8,
"vendor": "openbsd",
"version": "6.9"
},
{
"model": "integrated lights out manager",
"scope": "eq",
"trust": 1.1,
"vendor": "oracle",
"version": "3.2"
},
{
"model": "integrated lights out manager",
"scope": "eq",
"trust": 1.1,
"vendor": "oracle",
"version": "3.1"
},
{
"model": "integrated lights out manager",
"scope": "eq",
"trust": 1.1,
"vendor": "oracle",
"version": "3.0"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "10.10 to 10.10.4"
},
{
"model": "big-ip",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "1500"
},
{
"model": "openssh",
"scope": "eq",
"trust": 0.6,
"vendor": "openbsd",
"version": "6.9"
},
{
"model": "linux",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "15.04"
},
{
"model": "linux lts",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "14.04"
},
{
"model": "linux lts i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "12.04"
},
{
"model": "linux lts amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "12.04"
},
{
"model": "enterprise linux workstation optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux server optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux hpc node optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux hpc node",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux desktop optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux desktop",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "vm server for",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "x863.4"
},
{
"model": "vm server for",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "x863.3"
},
{
"model": "vm server for",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "x863.2"
},
{
"model": "linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "0"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "7"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "6.2"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "6"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.3,
"vendor": "oracle",
"version": "5"
},
{
"model": "6.9p1",
"scope": null,
"trust": 0.3,
"vendor": "openssh",
"version": null
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.4.13"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.28"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.4.2.1"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.4.2"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.4.1"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.4.0"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2.9."
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2.9"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2.6"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2.4"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2.2"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2.10"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.3.2"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.2.0.9"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.1.5.2"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.1.5.1"
},
{
"model": "web gateway",
"scope": "eq",
"trust": 0.3,
"vendor": "mcafee",
"version": "7.0.0"
},
{
"model": "nsmexpress",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": null
},
{
"model": "nsm4000",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": "0"
},
{
"model": "nsm3000",
"scope": "eq",
"trust": 0.3,
"vendor": "juniper",
"version": null
},
{
"model": "security network protection",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "5.3.2"
},
{
"model": "security network protection",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "5.3.1"
},
{
"model": "security network protection",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "5.2.0"
},
{
"model": "qlogic virtual fabric extension module for ibm bladecenter",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "9.0"
},
{
"model": "qlogic 8gb intelligent pass-thru module and san switch module",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "7.10"
},
{
"model": "proventia network enterprise scanner",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "2.3"
},
{
"model": "flex system fc43171 8gb san switch and san pass-thru",
"scope": "eq",
"trust": 0.3,
"vendor": "ibm",
"version": "9.1"
},
{
"model": "bladecenter advanced management module 3.66n",
"scope": null,
"trust": 0.3,
"vendor": "ibm",
"version": null
},
{
"model": "vcx",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "9.8.17"
},
{
"model": "bladesystem c-class virtual connect",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "4.45"
},
{
"model": "bladesystem c-class virtual connect",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "4.30"
},
{
"model": "bladesystem c-class virtual connect",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "4.21"
},
{
"model": "bladesystem c-class virtual connect",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "3.62"
},
{
"model": "3par os",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "3.1.3"
},
{
"model": "linux",
"scope": null,
"trust": 0.3,
"vendor": "gentoo",
"version": null
},
{
"model": "9.3-stable",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p9",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p6",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p5",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p3",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p2",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p13",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p10",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "9.3-release-p1",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p9",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p8",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p7",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p4",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p27",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p24",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p23",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p20",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p19",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p17",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p16",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p15",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p14",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p13",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p12",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "8.4-release-p11",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "freebsd",
"scope": "eq",
"trust": 0.3,
"vendor": "freebsd",
"version": "8.4"
},
{
"model": "freebsd",
"scope": "eq",
"trust": 0.3,
"vendor": "freebsd",
"version": "10.2"
},
{
"model": "10.1-release-p9",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "10.1-release-p6",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "10.1-release-p5",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "10.1-release-p1",
"scope": null,
"trust": 0.3,
"vendor": "freebsd",
"version": null
},
{
"model": "big-ip gv0lb151-20nnnn1",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "150010.0.1"
},
{
"model": "big-ip gv0lb151-20nnnn1",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.3.1"
},
{
"model": "big-ip gv0lb151-20nnnn1",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.1.3"
},
{
"model": "big-ip gv0lb151-10nnnn1",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "150010.0.1"
},
{
"model": "big-ip gv0lb151-10nnnn1",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.3.1"
},
{
"model": "big-ip gv0lb151-10nnnn1",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.1.3"
},
{
"model": "big-ip gv0lb150-20nnnn0",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "150010.0.1"
},
{
"model": "big-ip gv0lb150-20nnnn0",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.3.1"
},
{
"model": "big-ip gv0lb150-20nnnn0",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.1.3"
},
{
"model": "big-ip gv0lb150-10nnnn0",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "150010.0.1"
},
{
"model": "big-ip gv0lb150-10nnnn0",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.3.1"
},
{
"model": "big-ip gv0lb150-10nnnn0",
"scope": "eq",
"trust": 0.3,
"vendor": "f5",
"version": "15009.1.3"
},
{
"model": "centos",
"scope": "eq",
"trust": 0.3,
"vendor": "centos",
"version": "7"
},
{
"model": "centos",
"scope": "eq",
"trust": 0.3,
"vendor": "centos",
"version": "6"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.10.4"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.10.3"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.10.2"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.10.1"
},
{
"model": "mac os",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "x10.10"
},
{
"model": "qlogic virtual fabric extension module for ibm bladecenter",
"scope": "ne",
"trust": 0.3,
"vendor": "ibm",
"version": "9.0.3.14.0"
},
{
"model": "qlogic 8gb intelligent pass-thru module and san switch module",
"scope": "ne",
"trust": 0.3,
"vendor": "ibm",
"version": "7.10.1.37.00"
},
{
"model": "flex system fc43171 8gb san switch and san pass-thru",
"scope": "ne",
"trust": 0.3,
"vendor": "ibm",
"version": "9.1.7.01.00"
},
{
"model": "bladecenter advanced management module 3.66p",
"scope": "ne",
"trust": 0.3,
"vendor": "ibm",
"version": null
},
{
"model": "vcx",
"scope": "ne",
"trust": 0.3,
"vendor": "hp",
"version": "9.8.18"
},
{
"model": "bladesystem c-class virtual connect",
"scope": "ne",
"trust": 0.3,
"vendor": "hp",
"version": "4.50"
},
{
"model": "3par os mu2",
"scope": "ne",
"trust": 0.3,
"vendor": "hp",
"version": "3.2.2"
},
{
"model": "3par os mu5",
"scope": "ne",
"trust": 0.3,
"vendor": "hp",
"version": "3.2.1"
},
{
"model": "mac os",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "x10.10.5"
}
],
"sources": [
{
"db": "BID",
"id": "75990"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "6.9",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "king cope",
"sources": [
{
"db": "BID",
"id": "75990"
}
],
"trust": 0.3
},
"cve": "CVE-2015-5600",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 8.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 7.8,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 8.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2015-5600",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2015-5600",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201508-001",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2015-5600",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. Openssh of sshd of auth2-chall.c Inside kbdint_next_device The function is a keyboard interaction within a single connection (keyboard-interactive) The brute force is not adequately restricted for device processing. (brute-force) Attacks or service disruption (CPU Resource consumption ) There are vulnerabilities that are put into a state.By a third party ssh of -oKbdInteractiveDevices Brute force through an overly long and redundant list of options (brute-force) Attacks or service disruption (CPU Resource consumption ) There is a possibility of being put into a state. OpenSSH is prone to a security-bypass weakness. \nAn attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. These vulnerabilities\ninclude:\n\nThe SSLv3 vulnerability known as \"Padding Oracle on Downgraded Legacy\nEncryption\" also known as \"POODLE\", which could be exploited remotely\nresulting in disclosure of information. \nThe following firmware versions of Virtual Connect (VC) are impacted:\n\nHPE BladeSystem c-Class Virtual Connect (VC) Firmware 4.30 through VC 4.45\nHPE BladeSystem c-Class Virtual Connect (VC) Firmware 3.62 through VC 4.21\n\nNote: Firmware versions 3.62 through 4.21 are not impacted by CVE-2016-0800,\nCVE-2015-3194, CVE-2014-3566, CVE-2015-0705, CVE-2016-0799, and\nCVE-2016-2842. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-15:16.openssh Security Advisory\n The FreeBSD Project\n\nTopic: OpenSSH multiple vulnerabilities\n\nCategory: contrib\nModule: openssh\nAnnounced: 2015-07-28, revised on 2015-07-30\nAffects: All supported versions of FreeBSD. \nCorrected: 2015-07-28 19:58:44 UTC (stable/10, 10.2-PRERELEASE)\n 2015-07-28 19:58:44 UTC (stable/10, 10.2-BETA2-p2)\n 2015-07-28 19:59:04 UTC (releng/10.2, 10.2-RC1-p1)\n 2015-07-28 19:59:11 UTC (releng/10.1, 10.1-RELEASE-p16)\n 2015-07-28 19:58:54 UTC (stable/9, 9.3-STABLE)\n 2015-07-28 19:59:22 UTC (releng/9.3, 9.3-RELEASE-p21)\n 2015-07-30 10:09:07 UTC (stable/8, 8.4-STABLE)\n 2015-07-30 10:09:31 UTC (releng/8.4, 8.4-RELEASE-p36)\nCVE Name: CVE-2014-2653, CVE-2015-5600\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\n0. Revision history\n\nv1.0 2015-02-25 Initial release. \nv1.1 2015-07-30 Revised patch for FreeBSD 8.x to address regression when\n keyboard interactive authentication is used. \n\nI. Background\n\nOpenSSH is an implementation of the SSH protocol suite, providing an\nencrypted and authenticated transport for a variety of services,\nincluding remote shell access. \n\nThe security of the SSH connection relies on the server authenticating\nitself to the client as well as the user authenticating itself to the\nserver. SSH servers uses host keys to verify their identity. \n\nRFC 4255 has defined a method of verifying SSH host keys using Domain\nName System Security (DNSSEC), by publishing the key fingerprint using\nDNS with \"SSHFP\" resource record. RFC 6187 has defined methods to use\na signature by a trusted certification authority to bind a given public\nkey to a given digital identity with X.509v3 certificates. \n\nThe PAM (Pluggable Authentication Modules) library provides a flexible\nframework for user authentication and session setup / teardown. \n\nOpenSSH uses PAM for password authentication by default. \n\nII. Problem Description\n\nOpenSSH clients does not correctly verify DNS SSHFP records when a server\noffers a certificate. [CVE-2014-2653]\n\nOpenSSH servers which are configured to allow password authentication\nusing PAM (default) would allow many password attempts. \n\nIII. Impact\n\nA malicious server may be able to force a connecting client to skip DNS\nSSHFP record check and require the user to perform manual host verification\nof the host key fingerprint. This could allow man-in-the-middle attack\nif the user does not carefully check the fingerprint. [CVE-2014-2653]\n\nA remote attacker may effectively bypass MaxAuthTries settings, which would\nenable them to brute force passwords. [CVE-2015-5600]\n\nIV. Workaround\n\nSystems that do not use OpenSSH are not affected. \n\nThere is no workaround for CVE-2014-2653, but the problem only affects\nnetworks where DNSsec and SSHFP is properly configured. Users who uses\nSSH should always check server host key fingerprints carefully when\nprompted. \n\nSystem administrators can set:\n\n\tUsePAM no\n\nIn their /etc/ssh/sshd_config and restart sshd service to workaround the\nproblem described as CVE-2015-5600 at expense of losing features provided\nby the PAM framework. \n\nWe recommend system administrators to disable password based authentication\ncompletely, and use key based authentication exclusively in their SSH server\nconfiguration, when possible. This would eliminate the possibility of being\never exposed to password brute force attack. \n\nV. Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nSSH service has to be restarted after the update. A reboot is recommended\nbut not required. \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nSSH service has to be restarted after the update. A reboot is recommended\nbut not required. \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 9.3, 10.1, 10.2]\n# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh.patch\n# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh.patch.asc\n# gpg --verify openssh.patch.asc\n\n[FreeBSD 8.4]\n# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8.patch\n# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8.patch.asc\n# gpg --verify openssh-8.patch.asc\n\n# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8-errata.patc\n# fetch https://security.FreeBSD.org/patches/SA-15:16/openssh-8-errata.patch.asc\n# gpg --verify openssh-8-errata.patch.asc\n\nb) Apply the patch. Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the SSH service, or reboot the system. \n\nVI. Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path Revision\n- -------------------------------------------------------------------------\nstable/8/ r286067\nreleng/8.4/ r286068\nstable/9/ r285977\nreleng/9.3/ r285980\nstable/10/ r285976\nreleng/10.1/ r285979\nreleng/10.2/ r285978\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653\u003e\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5600\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-15:16.openssh.asc\u003e\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v2.1.6 (FreeBSD)\n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\nr0z98qmTEPiTDi8dr+K/\n=GsXJ\n-----END PGP SIGNATURE-----\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nNote: the current version of the following document is available here:\nhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n\na-c05128992\n\nSUPPORT COMMUNICATION - SECURITY BULLETIN\n\nDocument ID: c05128992\nVersion: 1\n\nHPSBST03599 rev.1 - HPE 3PAR OS running OpenSSH, Remote Denial of Service\n(DoS), Access Restriction Bypass\n\nNOTICE: The information in this Security Bulletin should be acted upon as\nsoon as possible. \n\nRelease Date: 2016-05-11\nLast Updated: 2016-05-11\n\nPotential Security Impact: Remote Access Restriction Bypass, Denial of\nService (DoS)\n\nSource: Hewlett Packard Enterprise, Product Security Response Team\n\nVULNERABILITY SUMMARY\nA vulnerability in OpenSSH has been addressed by HPE 3PAR OS. The vulnerabily\ncould be exploited remotely resulting in Denial of Service (DoS) or access\nrestriction bypass. \n\nReferences:\n\n - CVE-2015-5600\n - PSRT110106\n\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. \nHPE 3PAR OS versions 3.1.3 and later, prior to 3.2.1 MU5 and 3.2.2 MU2\nrunning OpenSSH\n\nBACKGROUND\n\nCVSS 2.0 Base Metrics\n===========================================================\n Reference Base Vector Base Score\nCVE-2015-5600 (AV:N/AC:L/Au:N/C:P/I:N/A:C) 8.5\n===========================================================\n Information on CVSS is documented\n in HP Customer Notice: HPSN-2008-002\n\nRESOLUTION\n\nHPE has provided the following software updates and mitigation information to\nresolve the vulnerability in 3PAR OS running OpenSSH. \n\n+ 3PAR OS 3.2.1 MU5 and 3.2.2 MU2\n\n - HPE recommends prior impacted versions update to 3PAR OS 3.2.1 MU5 or\n3.2.2 MU2. \n\n+ 3PAR OS 3.1.3 is also vulnerable but will not be fixed. \n\n **Mitigation:** The best protection to guard against exploitation of this\nvulnerability is to securely configure and operate the storage array in\naccordance with the *HPE 3PAR Configuration Guidelines* documentation. Please\ncontact HPE Technical Support for assistance. \n\nHISTORY\nVersion:1 (rev.1) - 11 May 2016 Initial release\n\nThird Party Security Patches: Third party security patches that are to be\ninstalled on systems running Hewlett Packard Enterprise (HPE) software\nproducts should be applied in accordance with the customer\u0027s patch management\npolicy. \n\nSupport: For issues about implementing the recommendations of this Security\nBulletin, contact normal HPE Services support channel. For other issues about\nthe content of this Security Bulletin, send e-mail to security-alert@hpe.com. \n\nReport: To report a potential security vulnerability with any HPE supported\nproduct, send Email to: security-alert@hpe.com\n\nSubscribe: To initiate a subscription to receive future HPE Security Bulletin\nalerts via Email: http://www.hpe.com/support/Subscriber_Choice\n\nSecurity Bulletin Archive: A list of recently released Security Bulletins is\navailable here: http://www.hpe.com/support/Security_Bulletin_Archive\n\nSoftware Product Category: The Software Product Category is represented in\nthe title by the two characters following HPSB. \n\n3C = 3COM\n3P = 3rd Party Software\nGN = HPE General Software\nHF = HPE Hardware and Firmware\nMU = Multi-Platform Software\nNS = NonStop Servers\nOV = OpenVMS\nPV = ProCurve\nST = Storage Software\nUX = HP-UX\n\nCopyright 2016 Hewlett Packard Enterprise\n\nHewlett Packard Enterprise shall not be liable for technical or editorial\nerrors or omissions contained herein. The information provided is provided\n\"as is\" without warranty of any kind. To the extent permitted by law, neither\nHP or its affiliates, subcontractors or suppliers will be liable for\nincidental,special or consequential damages including downtime cost; lost\nprofits; damages relating to the procurement of substitute products or\nservices; or damages for loss of data, or software restoration. The\ninformation in this document is subject to change without notice. Hewlett\nPackard Enterprise and the names of Hewlett Packard Enterprise products\nreferenced herein are trademarks of Hewlett Packard Enterprise in the United\nStates and other countries. Other product and company names mentioned herein\nmay be trademarks of their respective owners. ============================================================================\nUbuntu Security Notice USN-2710-2\nAugust 18, 2015\n\nopenssh regression\n============================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 15.04\n- Ubuntu 14.04 LTS\n- Ubuntu 12.04 LTS\n\nSummary:\n\nUSN-2710-1 introduced a regression in OpenSSH. The upstream fix for\nCVE-2015-5600 caused a regression resulting in random authentication\nfailures in non-default configurations. This update fixes the problem. \n\nOriginal advisory details:\n\n Moritz Jodeit discovered that OpenSSH incorrectly handled usernames when\n using PAM authentication. If an additional vulnerability were discovered in\n the OpenSSH unprivileged child process, this issue could allow a remote\n attacker to perform user impersonation. (CVE number pending)\n Moritz Jodeit discovered that OpenSSH incorrectly handled context memory\n when using PAM authentication. If an additional vulnerability were\n discovered in the OpenSSH unprivileged child process, this issue could\n allow a remote attacker to bypass authentication or possibly execute\n arbitrary code. (CVE number pending)\n Jann Horn discovered that OpenSSH incorrectly handled time windows for\n X connections. (CVE-2015-5352)\n It was discovered that OpenSSH incorrectly handled keyboard-interactive\n authentication. \n (CVE-2015-5600)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 15.04:\n openssh-server 1:6.7p1-5ubuntu1.3\n\nUbuntu 14.04 LTS:\n openssh-server 1:6.6p1-2ubuntu2.3\n\nUbuntu 12.04 LTS:\n openssh-server 1:5.9p1-5ubuntu1.7\n\nIn general, a standard system update will make all the necessary changes. \n\nReferences:\n http://www.ubuntu.com/usn/usn-2710-2\n http://www.ubuntu.com/usn/usn-2710-1\n https://launchpad.net/bugs/1485719\n\nPackage Information:\n https://launchpad.net/ubuntu/+source/openssh/1:6.7p1-5ubuntu1.3\n https://launchpad.net/ubuntu/+source/openssh/1:6.6p1-2ubuntu2.3\n https://launchpad.net/ubuntu/+source/openssh/1:5.9p1-5ubuntu1.7\n. \nVCX prior to 9.8.18 with OpenSSH or ISC BIND. \n\n+ VCX 9.8.18 for the following Products/SKUs:\n\n - J9672A HP VCX V7205 Platform w/ DL360 G7 Srvr\n - J9668A HP VCX IPC V7005 Pltfrm w/ DL120 G6 Srvr\n - JC517A HP VCX V7205 Platform w/DL 360 G6 Server\n - JE355A HP VCX V6000 Branch Platform 9.0\n - JC516A HP VCX V7005 Platform w/DL 120 G6 Server\n - JC518A HP VCX Connect 200 Primry 120 G6 Server\n - J9669A HP VCX IPC V7310 Pltfrm w/ DL360 G7 Srvr\n - JE341A HP VCX Connect 100 Secondary\n - JE252A HP VCX Connect Primary MIM Module\n - JE253A HP VCX Connect Secondary MIM Module\n - JE254A HP VCX Branch MIM Module\n - JE355A HP VCX V6000 Branch Platform 9.0\n - JD028A HP MS30-40 RTR w/VCX + T1/FXO/FXS/Mod\n - JD023A HP MSR30-40 Router with VCX MIM Module\n - JD024A HP MSR30-16 RTR w/VCX Ent Br Com MIM\n - JD025A HP MSR30-16 RTR w/VCX + 4FXO/2FXS Mod\n - JD026A HP MSR30-16 RTR w/VCX + 8FXO/4FXS Mod\n - JD027A HP MSR30-16 RTR w/VCX + 8BRI/4FXS Mod\n - JD029A HP MSR30-16 RTR w/VCX + E1/4BRI/4FXS\n - JE340A HP VCX Connect 100 Pri Server 9.0\n - JE342A HP VCX Connect 100 Sec Server 9.0\n\nHISTORY\nVersion:1 (rev.1) - 28 January 2016 Initial release\n\nThird Party Security Patches: Third party security patches that are to be\ninstalled on systems running Hewlett Packard Enterprise (HPE) software\nproducts should be applied in accordance with the customer\u0027s patch management\npolicy. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201512-04\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: OpenSSH: Multiple vulnerabilities\n Date: December 20, 2015\n Bugs: #553724, #555518, #557340\n ID: 201512-04\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in OpenSSH, the worst of which\ncould lead to arbitrary code execution, or cause a Denial of Service\ncondition. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 net-misc/openssh \u003c 7.1_p1-r2 \u003e= 7.1_p1-r2\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in OpenSSH. Please review\nthe CVE identifiers referenced below for details. \n\nImpact\n======\n\n\n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll OpenSSH users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=net-misc/openssh-6.9_p1-r2\"\n\nReferences\n==========\n\n[ 1 ] CVE-2015-5352\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5352\n[ 2 ] CVE-2015-5600\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5600\n[ 3 ] CVE-2015-6563\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6563\n[ 4 ] CVE-2015-6564\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6564\n[ 5 ] CVE-2015-6565\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6565\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201512-04\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2015 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-5600"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "BID",
"id": "75990"
},
{
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"db": "PACKETSTORM",
"id": "137294"
},
{
"db": "PACKETSTORM",
"id": "132875"
},
{
"db": "PACKETSTORM",
"id": "133087"
},
{
"db": "PACKETSTORM",
"id": "136977"
},
{
"db": "PACKETSTORM",
"id": "133130"
},
{
"db": "PACKETSTORM",
"id": "135505"
},
{
"db": "PACKETSTORM",
"id": "135009"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-5600",
"trust": 3.5
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2015/07/23/4",
"trust": 2.5
},
{
"db": "BID",
"id": "75990",
"trust": 2.0
},
{
"db": "MCAFEE",
"id": "SB10157",
"trust": 1.7
},
{
"db": "MCAFEE",
"id": "SB10136",
"trust": 1.7
},
{
"db": "BID",
"id": "92012",
"trust": 1.7
},
{
"db": "BID",
"id": "91787",
"trust": 1.7
},
{
"db": "SIEMENS",
"id": "SSA-412672",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1032988",
"trust": 1.7
},
{
"db": "JUNIPER",
"id": "JSA10697",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001",
"trust": 0.6
},
{
"db": "JUNIPER",
"id": "JSA10774",
"trust": 0.3
},
{
"db": "MCAFEE",
"id": "SB10164",
"trust": 0.3
},
{
"db": "ICS CERT",
"id": "ICSA-22-349-21",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2015-5600",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "137294",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "132875",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "133087",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "136977",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "133130",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "135505",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "135009",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"db": "BID",
"id": "75990"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "PACKETSTORM",
"id": "137294"
},
{
"db": "PACKETSTORM",
"id": "132875"
},
{
"db": "PACKETSTORM",
"id": "133087"
},
{
"db": "PACKETSTORM",
"id": "136977"
},
{
"db": "PACKETSTORM",
"id": "133130"
},
{
"db": "PACKETSTORM",
"id": "135505"
},
{
"db": "PACKETSTORM",
"id": "135009"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"id": "VAR-201508-0620",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.4615448
},
"last_update_date": "2024-07-22T22:56:58.009000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006",
"trust": 0.8,
"url": "http://lists.apple.com/archives/security-announce/2015/aug/msg00001.html"
},
{
"title": "HT205031",
"trust": 0.8,
"url": "https://support.apple.com/en-us/ht205031"
},
{
"title": "HT205031",
"trust": 0.8,
"url": "https://support.apple.com/ja-jp/ht205031"
},
{
"title": "CVS log for src/usr.bin/ssh/auth2-chall.c",
"trust": 0.8,
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"title": "Diff for /src/usr.bin/ssh/auth2-chall.c between version 1.42 and 1.43",
"trust": 0.8,
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"title": "Oracle Critical Patch Update Advisory - July 2016",
"trust": 0.8,
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"title": "Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices",
"trust": 0.8,
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2016verbose-2881721.html"
},
{
"title": "Oracle Solaris Third Party Bulletin - October 2015",
"trust": 0.8,
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"title": "July 2016 Critical Patch Update Released",
"trust": 0.8,
"url": "https://blogs.oracle.com/security/entry/july_2016_critical_patch_update"
},
{
"title": "OpenSSH\u306e\u8106\u5f31\u6027(CVE-2015-5600)\u306b\u3088\u308bBIG-IP1500\u3078\u306e\u5f71\u97ff\u306b\u3064\u3044\u3066",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/openssh_cve20155600_big.html"
},
{
"title": "auth2-chall",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=57086"
},
{
"title": "Red Hat: Moderate: openssh security, bug fix, and enhancement update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20152088 - security advisory"
},
{
"title": "Debian CVElist Bug Report Logs: openssh: CVE-2015-5352: XSECURITY restrictions bypass under certain conditions in ssh",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=cb1cb0a27af47a61a0356f0de0943be8"
},
{
"title": "Debian CVElist Bug Report Logs: openssh: CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=6ddb8aa51aaa09b7fbd5a473e33cd0f9"
},
{
"title": "Ubuntu Security Notice: openssh vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-2710-1"
},
{
"title": "Ubuntu Security Notice: openssh regression",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-2710-2"
},
{
"title": "Red Hat: CVE-2015-5600",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2015-5600"
},
{
"title": "Debian CVElist Bug Report Logs: openssh: CVE-2015-6563 CVE-2015-6564",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=73eb91ff53511af2767cd29878bd74dc"
},
{
"title": "Amazon Linux AMI: ALAS-2015-625",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2015-625"
},
{
"title": "Symantec Security Advisories: SA104 : OpenSSH Vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories\u0026qid=b643e473a764678a8d1ded300d5699b6"
},
{
"title": "Oracle Linux Bulletins: Oracle Linux Bulletin - April 2016",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins\u0026qid=83bbd91f8369c8f064e6d68dac68400f"
},
{
"title": "Oracle Linux Bulletins: Oracle Linux Bulletin - October 2015",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins\u0026qid=435ed9abc2fb1e74ce2a69605a01e326"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - July 2016",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=3a04485ebb79f7fbc2472bf9af5ce489"
},
{
"title": "Oracle VM Server for x86 Bulletins: Oracle VM Server for x86 Bulletin - July 2016",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_vm_server_for_x86_bulletins\u0026qid=6c15273f6bf4a785175f27073b98a1ce"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - July 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=5f8c525f1408011628af1792207b2099"
},
{
"title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - October 2015",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=92308e3c4d305e91c2eba8c9c6835e83"
},
{
"title": "Final_Project_CyberBootcamp",
"trust": 0.1,
"url": "https://github.com/pboonman196/final_project_cyberbootcamp "
},
{
"title": "IDS-Evasion",
"trust": 0.1,
"url": "https://github.com/ahm3dhany/ids-evasion "
},
{
"title": "clair-lab",
"trust": 0.1,
"url": "https://github.com/sjourdan/clair-lab "
},
{
"title": "DC-2-Vulnhub-Walkthrough",
"trust": 0.1,
"url": "https://github.com/vshaliii/dc-2-vulnhub-walkthrough "
},
{
"title": "DC-1-Vulnhub-Walkthrough",
"trust": 0.1,
"url": "https://github.com/vshaliii/dc-1-vulnhub-walkthrough "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://openwall.com/lists/oss-security/2015/07/23/4"
},
{
"trust": 2.0,
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"trust": 2.0,
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"trust": 2.0,
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"trust": 1.9,
"url": "http://www.ubuntu.com/usn/usn-2710-1"
},
{
"trust": 1.8,
"url": "https://security.gentoo.org/glsa/201512-04"
},
{
"trust": 1.8,
"url": "http://www.ubuntu.com/usn/usn-2710-2"
},
{
"trust": 1.7,
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42\u0026r2=1.43\u0026f=h"
},
{
"trust": 1.7,
"url": "http://seclists.org/fulldisclosure/2015/jul/92"
},
{
"trust": 1.7,
"url": "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c"
},
{
"trust": 1.7,
"url": "http://lists.apple.com/archives/security-announce/2015/aug/msg00001.html"
},
{
"trust": 1.7,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-july/162955.html"
},
{
"trust": 1.7,
"url": "https://support.apple.com/kb/ht205031"
},
{
"trust": 1.7,
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05157667"
},
{
"trust": 1.7,
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05128992"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/91787"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/75990"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/92012"
},
{
"trust": 1.7,
"url": "http://rhn.redhat.com/errata/rhsa-2016-0466.html"
},
{
"trust": 1.7,
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10157"
},
{
"trust": 1.7,
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c04952480"
},
{
"trust": 1.7,
"url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10697"
},
{
"trust": 1.7,
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10136"
},
{
"trust": 1.7,
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"trust": 1.7,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-august/165170.html"
},
{
"trust": 1.7,
"url": "http://www.securitytracker.com/id/1032988"
},
{
"trust": 1.7,
"url": "https://security.netapp.com/advisory/ntap-20151106-0001/"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"trust": 1.7,
"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html"
},
{
"trust": 1.7,
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12"
},
{
"trust": 1.7,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-5600"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-5600"
},
{
"trust": 0.7,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-5600"
},
{
"trust": 0.3,
"url": "http://seclists.org/oss-sec/2015/q3/156"
},
{
"trust": 0.3,
"url": "http://seclists.org/bugtraq/2015/jul/134"
},
{
"trust": 0.3,
"url": "http://seclists.org/bugtraq/2015/jul/141"
},
{
"trust": 0.3,
"url": "http://www.openssh.com"
},
{
"trust": 0.3,
"url": "https://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10774\u0026actp=rss"
},
{
"trust": 0.3,
"url": "http://prod.lists.apple.com/archives/security-announce/2015/aug/msg00001.html"
},
{
"trust": 0.3,
"url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c04952480"
},
{
"trust": 0.3,
"url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c05157667"
},
{
"trust": 0.3,
"url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c05128992"
},
{
"trust": 0.3,
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10164"
},
{
"trust": 0.3,
"url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099240"
},
{
"trust": 0.3,
"url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5098977"
},
{
"trust": 0.3,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21969670"
},
{
"trust": 0.3,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21980969"
},
{
"trust": 0.3,
"url": "http://www.hitachi.co.jp/products/it/server/security/global/info/vulnerable/openssh_cve20155600_big.html"
},
{
"trust": 0.3,
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_n"
},
{
"trust": 0.3,
"url": "http://www.hpe.com/support/security_bulletin_archive"
},
{
"trust": 0.3,
"url": "http://www.hpe.com/support/subscriber_choice"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-5352"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/264.html"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2015:2088"
},
{
"trust": 0.1,
"url": "https://github.com/pboonman196/final_project_cyberbootcamp"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://usn.ubuntu.com/2710-1/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2015-5600"
},
{
"trust": 0.1,
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-21"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=40178"
},
{
"trust": 0.1,
"url": "http://h20564.www2.hpe.com/hpsc/swd/public"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-3194"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-0705"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2008-5161"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-1789"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-0800"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-2842"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-1791"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-3566"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-0799"
},
{
"trust": 0.1,
"url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/\u003e."
},
{
"trust": 0.1,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-5600\u003e"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/patches/sa-15:16/openssh.patch.asc"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/patches/sa-15:16/openssh.patch"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/patches/sa-15:16/openssh-8-errata.patc"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/patches/sa-15:16/openssh-8-errata.patch.asc"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/advisories/freebsd-sa-15:16.openssh.asc\u003e"
},
{
"trust": 0.1,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2653\u003e"
},
{
"trust": 0.1,
"url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-2653"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/patches/sa-15:16/openssh-8.patch.asc"
},
{
"trust": 0.1,
"url": "https://security.freebsd.org/patches/sa-15:16/openssh-8.patch"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssh/1:5.9p1-5ubuntu1.6"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssh/1:6.7p1-5ubuntu1.2"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssh/1:6.6p1-2ubuntu2.2"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssh/1:5.9p1-5ubuntu1.7"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssh/1:6.6p1-2ubuntu2.3"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssh/1:6.7p1-5ubuntu1.3"
},
{
"trust": 0.1,
"url": "https://launchpad.net/bugs/1485719"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-5477"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-5722"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5352"
},
{
"trust": 0.1,
"url": "http://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-6565"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-6565"
},
{
"trust": 0.1,
"url": "https://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-6563"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-6564"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5600"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-6563"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-6564"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"db": "BID",
"id": "75990"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "PACKETSTORM",
"id": "137294"
},
{
"db": "PACKETSTORM",
"id": "132875"
},
{
"db": "PACKETSTORM",
"id": "133087"
},
{
"db": "PACKETSTORM",
"id": "136977"
},
{
"db": "PACKETSTORM",
"id": "133130"
},
{
"db": "PACKETSTORM",
"id": "135505"
},
{
"db": "PACKETSTORM",
"id": "135009"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"db": "BID",
"id": "75990"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"db": "PACKETSTORM",
"id": "137294"
},
{
"db": "PACKETSTORM",
"id": "132875"
},
{
"db": "PACKETSTORM",
"id": "133087"
},
{
"db": "PACKETSTORM",
"id": "136977"
},
{
"db": "PACKETSTORM",
"id": "133130"
},
{
"db": "PACKETSTORM",
"id": "135505"
},
{
"db": "PACKETSTORM",
"id": "135009"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-08-03T00:00:00",
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"date": "2015-07-22T00:00:00",
"db": "BID",
"id": "75990"
},
{
"date": "2015-08-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"date": "2016-06-02T16:22:00",
"db": "PACKETSTORM",
"id": "137294"
},
{
"date": "2015-07-28T22:22:22",
"db": "PACKETSTORM",
"id": "132875"
},
{
"date": "2015-08-14T20:53:10",
"db": "PACKETSTORM",
"id": "133087"
},
{
"date": "2016-05-12T16:07:26",
"db": "PACKETSTORM",
"id": "136977"
},
{
"date": "2015-08-18T22:29:09",
"db": "PACKETSTORM",
"id": "133130"
},
{
"date": "2016-01-29T20:34:00",
"db": "PACKETSTORM",
"id": "135505"
},
{
"date": "2015-12-21T23:23:00",
"db": "PACKETSTORM",
"id": "135009"
},
{
"date": "2015-08-03T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"date": "2015-08-03T01:59:03.950000",
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-12-13T00:00:00",
"db": "VULMON",
"id": "CVE-2015-5600"
},
{
"date": "2017-01-23T00:06:00",
"db": "BID",
"id": "75990"
},
{
"date": "2016-07-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-003969"
},
{
"date": "2022-12-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201508-001"
},
{
"date": "2022-12-13T12:15:17.307000",
"db": "NVD",
"id": "CVE-2015-5600"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "133087"
},
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Openssh of sshd of auth2-chall.c Inside kbdint_next_device Vulnerability to execute brute force attacks in functions",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-003969"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control issues",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201508-001"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.