Description
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/94972 ↗
- https://security.netapp.com/advisory/ntap-20171130-0002/ ↗
- http://www.openwall.com/lists/oss-security/2016/12/19/2 ↗
- http://www.securitytracker.com/id/1037490 ↗
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us ↗
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc ↗
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637 ↗
- https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce ↗
- https://www.exploit-db.com/exploits/40962/ ↗
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1010 ↗
- http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html ↗
- https://www.openssh.com/txt/release-7.4 ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf ↗