CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-1908

The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 75.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2016-1908

Openbsd » Openssh » Version: N/A

cpe:2.3:a:openbsd:openssh:-
Openbsd » Openssh » Version: 1.2

cpe:2.3:a:openbsd:openssh:1.2
Openbsd » Openssh » Version: 1.2.1

cpe:2.3:a:openbsd:openssh:1.2.1
Openbsd » Openssh » Version: 1.2.2

cpe:2.3:a:openbsd:openssh:1.2.2
Openbsd » Openssh » Version: 1.2.27

cpe:2.3:a:openbsd:openssh:1.2.27
Openbsd » Openssh » Version: 1.2.3

cpe:2.3:a:openbsd:openssh:1.2.3
Openbsd » Openssh » Version: 1.3

cpe:2.3:a:openbsd:openssh:1.3
Openbsd » Openssh » Version: 1.5

cpe:2.3:a:openbsd:openssh:1.5
Openbsd » Openssh » Version: 1.5.7

cpe:2.3:a:openbsd:openssh:1.5.7
Openbsd » Openssh » Version: 1.5.8

cpe:2.3:a:openbsd:openssh:1.5.8
Openbsd » Openssh » Version: 2

cpe:2.3:a:openbsd:openssh:2
Openbsd » Openssh » Version: 2.1

cpe:2.3:a:openbsd:openssh:2.1
Openbsd » Openssh » Version: 2.1.0

cpe:2.3:a:openbsd:openssh:2.1.0
Openbsd » Openssh » Version: 2.1.1

cpe:2.3:a:openbsd:openssh:2.1.1
Openbsd » Openssh » Version: 2.2

cpe:2.3:a:openbsd:openssh:2.2
Openbsd » Openssh » Version: 2.2.0

cpe:2.3:a:openbsd:openssh:2.2.0
Openbsd » Openssh » Version: 2.3

cpe:2.3:a:openbsd:openssh:2.3
Openbsd » Openssh » Version: 2.3.0

cpe:2.3:a:openbsd:openssh:2.3.0
Openbsd » Openssh » Version: 2.3.1

cpe:2.3:a:openbsd:openssh:2.3.1
Openbsd » Openssh » Version: 2.5

cpe:2.3:a:openbsd:openssh:2.5
Openbsd » Openssh » Version: 2.5.1

cpe:2.3:a:openbsd:openssh:2.5.1
Openbsd » Openssh » Version: 2.5.2

cpe:2.3:a:openbsd:openssh:2.5.2
Openbsd » Openssh » Version: 2.9

cpe:2.3:a:openbsd:openssh:2.9
Openbsd » Openssh » Version: 2.9.9

cpe:2.3:a:openbsd:openssh:2.9.9
Openbsd » Openssh » Version: 2.9.9p2

cpe:2.3:a:openbsd:openssh:2.9.9p2
Openbsd » Openssh » Version: 2.9p1

cpe:2.3:a:openbsd:openssh:2.9p1
Openbsd » Openssh » Version: 2.9p2

cpe:2.3:a:openbsd:openssh:2.9p2
Openbsd » Openssh » Version: 3.0

cpe:2.3:a:openbsd:openssh:3.0
Openbsd » Openssh » Version: 3.0.1

cpe:2.3:a:openbsd:openssh:3.0.1
Openbsd » Openssh » Version: 3.0.1p1

cpe:2.3:a:openbsd:openssh:3.0.1p1
Openbsd » Openssh » Version: 3.0.2

cpe:2.3:a:openbsd:openssh:3.0.2
Openbsd » Openssh » Version: 3.0.2p1

cpe:2.3:a:openbsd:openssh:3.0.2p1
Openbsd » Openssh » Version: 3.0p1

cpe:2.3:a:openbsd:openssh:3.0p1
Openbsd » Openssh » Version: 3.1

cpe:2.3:a:openbsd:openssh:3.1
Openbsd » Openssh » Version: 3.1p1

cpe:2.3:a:openbsd:openssh:3.1p1
Openbsd » Openssh » Version: 3.2

cpe:2.3:a:openbsd:openssh:3.2
Openbsd » Openssh » Version: 3.2.2

cpe:2.3:a:openbsd:openssh:3.2.2
Openbsd » Openssh » Version: 3.2.2p1

cpe:2.3:a:openbsd:openssh:3.2.2p1
Openbsd » Openssh » Version: 3.2.3

cpe:2.3:a:openbsd:openssh:3.2.3
Openbsd » Openssh » Version: 3.2.3p1

cpe:2.3:a:openbsd:openssh:3.2.3p1
Openbsd » Openssh » Version: 3.3

cpe:2.3:a:openbsd:openssh:3.3
Openbsd » Openssh » Version: 3.3p1

cpe:2.3:a:openbsd:openssh:3.3p1
Openbsd » Openssh » Version: 3.4

cpe:2.3:a:openbsd:openssh:3.4
Openbsd » Openssh » Version: 3.4p1

cpe:2.3:a:openbsd:openssh:3.4p1
Openbsd » Openssh » Version: 3.5

cpe:2.3:a:openbsd:openssh:3.5
Openbsd » Openssh » Version: 3.5p1

cpe:2.3:a:openbsd:openssh:3.5p1
Openbsd » Openssh » Version: 3.6

cpe:2.3:a:openbsd:openssh:3.6
Openbsd » Openssh » Version: 3.6.1

cpe:2.3:a:openbsd:openssh:3.6.1
Openbsd » Openssh » Version: 3.6.1p1

cpe:2.3:a:openbsd:openssh:3.6.1p1
Openbsd » Openssh » Version: 3.6.1p2

cpe:2.3:a:openbsd:openssh:3.6.1p2
Openbsd » Openssh » Version: 3.7

cpe:2.3:a:openbsd:openssh:3.7
Openbsd » Openssh » Version: 3.7.1

cpe:2.3:a:openbsd:openssh:3.7.1
Openbsd » Openssh » Version: 3.7.1p1

cpe:2.3:a:openbsd:openssh:3.7.1p1
Openbsd » Openssh » Version: 3.7.1p2

cpe:2.3:a:openbsd:openssh:3.7.1p2
Openbsd » Openssh » Version: 3.8

cpe:2.3:a:openbsd:openssh:3.8
Openbsd » Openssh » Version: 3.8.1

cpe:2.3:a:openbsd:openssh:3.8.1
Openbsd » Openssh » Version: 3.8.1p1

cpe:2.3:a:openbsd:openssh:3.8.1p1
Openbsd » Openssh » Version: 3.9

cpe:2.3:a:openbsd:openssh:3.9
Openbsd » Openssh » Version: 3.9.1

cpe:2.3:a:openbsd:openssh:3.9.1
Openbsd » Openssh » Version: 3.9.1p1

cpe:2.3:a:openbsd:openssh:3.9.1p1
Openbsd » Openssh » Version: 4.0

cpe:2.3:a:openbsd:openssh:4.0
Openbsd » Openssh » Version: 4.0p1

cpe:2.3:a:openbsd:openssh:4.0p1
Openbsd » Openssh » Version: 4.1

cpe:2.3:a:openbsd:openssh:4.1
Openbsd » Openssh » Version: 4.1p1

cpe:2.3:a:openbsd:openssh:4.1p1
Openbsd » Openssh » Version: 4.2

cpe:2.3:a:openbsd:openssh:4.2
Openbsd » Openssh » Version: 4.2p1

cpe:2.3:a:openbsd:openssh:4.2p1
Openbsd » Openssh » Version: 4.3

cpe:2.3:a:openbsd:openssh:4.3
Openbsd » Openssh » Version: 4.3p1

cpe:2.3:a:openbsd:openssh:4.3p1
Openbsd » Openssh » Version: 4.3p2

cpe:2.3:a:openbsd:openssh:4.3p2
Openbsd » Openssh » Version: 4.4

cpe:2.3:a:openbsd:openssh:4.4
Openbsd » Openssh » Version: 4.4p1

cpe:2.3:a:openbsd:openssh:4.4p1
Openbsd » Openssh » Version: 4.5

cpe:2.3:a:openbsd:openssh:4.5
Openbsd » Openssh » Version: 4.6

cpe:2.3:a:openbsd:openssh:4.6
Openbsd » Openssh » Version: 4.7

cpe:2.3:a:openbsd:openssh:4.7
Openbsd » Openssh » Version: 4.7p1

cpe:2.3:a:openbsd:openssh:4.7p1
Openbsd » Openssh » Version: 4.8

cpe:2.3:a:openbsd:openssh:4.8
Openbsd » Openssh » Version: 4.9

cpe:2.3:a:openbsd:openssh:4.9
Openbsd » Openssh » Version: 5.0

cpe:2.3:a:openbsd:openssh:5.0
Openbsd » Openssh » Version: 5.1

cpe:2.3:a:openbsd:openssh:5.1
Openbsd » Openssh » Version: 5.2

cpe:2.3:a:openbsd:openssh:5.2
Openbsd » Openssh » Version: 5.3

cpe:2.3:a:openbsd:openssh:5.3
Openbsd » Openssh » Version: 5.4

cpe:2.3:a:openbsd:openssh:5.4
Openbsd » Openssh » Version: 5.5

cpe:2.3:a:openbsd:openssh:5.5
Openbsd » Openssh » Version: 5.6

cpe:2.3:a:openbsd:openssh:5.6
Openbsd » Openssh » Version: 5.7

cpe:2.3:a:openbsd:openssh:5.7
Openbsd » Openssh » Version: 5.8

cpe:2.3:a:openbsd:openssh:5.8
Openbsd » Openssh » Version: 5.8p2

cpe:2.3:a:openbsd:openssh:5.8p2
Openbsd » Openssh » Version: 5.9

cpe:2.3:a:openbsd:openssh:5.9
Openbsd » Openssh » Version: 6.0

cpe:2.3:a:openbsd:openssh:6.0
Openbsd » Openssh » Version: 6.1

cpe:2.3:a:openbsd:openssh:6.1
Openbsd » Openssh » Version: 6.2

cpe:2.3:a:openbsd:openssh:6.2
Openbsd » Openssh » Version: 6.3

cpe:2.3:a:openbsd:openssh:6.3
Openbsd » Openssh » Version: 6.4

cpe:2.3:a:openbsd:openssh:6.4
Openbsd » Openssh » Version: 6.5

cpe:2.3:a:openbsd:openssh:6.5
Openbsd » Openssh » Version: 6.6

cpe:2.3:a:openbsd:openssh:6.6
Openbsd » Openssh » Version: 6.7

cpe:2.3:a:openbsd:openssh:6.7
Openbsd » Openssh » Version: 6.8

cpe:2.3:a:openbsd:openssh:6.8
Openbsd » Openssh » Version: 6.9

cpe:2.3:a:openbsd:openssh:6.9
Openbsd » Openssh » Version: 7.0

cpe:2.3:a:openbsd:openssh:7.0
Openbsd » Openssh » Version: 7.1

cpe:2.3:a:openbsd:openssh:7.1
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Oracle » Linux » Version: 6

cpe:2.3:o:oracle:linux:6
Oracle » Linux » Version: 7

cpe:2.3:o:oracle:linux:7
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_eus:7.2
Redhat » Enterprise Linux Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_eus:7.3
Redhat » Enterprise Linux Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4
Redhat » Enterprise Linux Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5
Redhat » Enterprise Linux Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-1908

Products

Pricing

Contact Us