CVE-2015-5352

The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X…

published August 3, 2015

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05445 · 92.7th percentile
Published
2015-08-03T00:00Z
EPSS history
Timeline
  • 03 AUG 00:00Z
    The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X…
    cvelistv5