CVE-2015-6565

sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.67% chance of exploitation in the next 30 days, 86th percentile

Published

2015-08-24

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41173

Security advisories

• http://www.openssh.com/txt/release-7.0
• http://www.securityfocus.com/bid/76497
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380

References

• CVE Record
• NVD entry