{
   "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
      affected_products: {
         "@id": "https://www.variotdbs.pl/ref/affected_products",
      },
      configurations: {
         "@id": "https://www.variotdbs.pl/ref/configurations",
      },
      credits: {
         "@id": "https://www.variotdbs.pl/ref/credits",
      },
      cvss: {
         "@id": "https://www.variotdbs.pl/ref/cvss/",
      },
      description: {
         "@id": "https://www.variotdbs.pl/ref/description/",
      },
      exploit_availability: {
         "@id": "https://www.variotdbs.pl/ref/exploit_availability/",
      },
      external_ids: {
         "@id": "https://www.variotdbs.pl/ref/external_ids/",
      },
      iot: {
         "@id": "https://www.variotdbs.pl/ref/iot/",
      },
      iot_taxonomy: {
         "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/",
      },
      patch: {
         "@id": "https://www.variotdbs.pl/ref/patch/",
      },
      problemtype_data: {
         "@id": "https://www.variotdbs.pl/ref/problemtype_data/",
      },
      references: {
         "@id": "https://www.variotdbs.pl/ref/references/",
      },
      sources: {
         "@id": "https://www.variotdbs.pl/ref/sources/",
      },
      sources_release_date: {
         "@id": "https://www.variotdbs.pl/ref/sources_release_date/",
      },
      sources_update_date: {
         "@id": "https://www.variotdbs.pl/ref/sources_update_date/",
      },
      threat_type: {
         "@id": "https://www.variotdbs.pl/ref/threat_type/",
      },
      title: {
         "@id": "https://www.variotdbs.pl/ref/title/",
      },
      type: {
         "@id": "https://www.variotdbs.pl/ref/type/",
      },
   },
   "@id": "https://www.variotdbs.pl/vuln/VAR-201508-0112",
   affected_products: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
            "@id": "https://www.variotdbs.pl/ref/sources",
         },
      },
      data: [
         {
            model: "openssh",
            scope: "lte",
            trust: 1,
            vendor: "openbsd",
            version: "6.9",
         },
         {
            model: "mac os x",
            scope: "lte",
            trust: 1,
            vendor: "apple",
            version: "10.11.0",
         },
         {
            model: "openssh",
            scope: "lt",
            trust: 0.8,
            vendor: "openbsd",
            version: "7.0",
         },
         {
            model: "mac os x",
            scope: "eq",
            trust: 0.8,
            vendor: "apple",
            version: "10.11",
         },
         {
            model: "mac os x",
            scope: "eq",
            trust: 0.6,
            vendor: "apple",
            version: "10.11.0",
         },
         {
            model: "nsmexpress",
            scope: "eq",
            trust: 0.3,
            vendor: "juniper",
            version: null,
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "8.0",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.3.4",
         },
         {
            model: "nsm3000",
            scope: "eq",
            trust: 0.3,
            vendor: "juniper",
            version: null,
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.3",
         },
         {
            model: "power hmc",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.9.0.0",
         },
         {
            model: "power hmc",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "8.3.0.0",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.09",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.211",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.13",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.3.0",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.5",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.2",
         },
         {
            model: "mac os",
            scope: "eq",
            trust: 0.3,
            vendor: "apple",
            version: "x10.11",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.08",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.1.8",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.3.2",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.214",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.4.0.4",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "1.0",
         },
         {
            model: "power hmc",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "8.1.0.0",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.1",
         },
         {
            model: "security network protection",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "5.3.1",
         },
         {
            model: "smartcloud entry fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.19",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.4",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.1.3",
         },
         {
            model: "security privileged identity manager",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.0",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.410",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.08",
         },
         {
            model: "mac os",
            scope: "ne",
            trust: 0.3,
            vendor: "apple",
            version: "x10.11.2",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.24",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.4.0.3",
         },
         {
            model: "power hmc",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "8.4.0.0",
         },
         {
            model: "aix",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "5.3",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "6.0",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.10",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.213",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.403",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.3",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.219",
         },
         {
            model: "storwize",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "v3500-",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.113",
         },
         {
            model: "smartcloud entry appliance fi",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.4",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.6",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.3.0.4",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "3.0",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.3",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.11",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.2",
         },
         {
            model: "infinity",
            scope: "ne",
            trust: 0.3,
            vendor: "pexip",
            version: "10.1",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.4",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.3.3",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.22",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.0.1",
         },
         {
            model: "mac os",
            scope: "eq",
            trust: 0.3,
            vendor: "apple",
            version: "x10.9.5",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.404",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.7",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.010",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.22",
         },
         {
            model: "flex system manager",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "1.3.4.0",
         },
         {
            model: "nsm4000",
            scope: "eq",
            trust: 0.3,
            vendor: "juniper",
            version: "0",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.3",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.110",
         },
         {
            model: "smartcloud entry fixpack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.413",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.1",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "5.0",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.2",
         },
         {
            model: "power hmc",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "8.2.0.0",
         },
         {
            model: "storwize",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "v3700-",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.0",
         },
         {
            model: "storwize",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "v5000-",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.36",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.3",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.401",
         },
         {
            model: "san volume controller",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "0",
         },
         {
            model: "solaris",
            scope: "eq",
            trust: 0.3,
            vendor: "oracle",
            version: "11.3",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.8",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.21",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.0.3",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.0",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.4",
         },
         {
            model: "email gateway 7.6.405h1165239",
            scope: null,
            trust: 0.3,
            vendor: "mcafee",
            version: null,
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "2.0",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.0.0",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.2.4",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.5",
         },
         {
            model: "linux",
            scope: null,
            trust: 0.3,
            vendor: "gentoo",
            version: null,
         },
         {
            model: "security privileged identity manager fixpack",
            scope: "ne",
            trust: 0.3,
            vendor: "ibm",
            version: "2.0.28",
         },
         {
            model: "storwize",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "v7000",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.2.0",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.44",
         },
         {
            model: "power hmc",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "8.5.0.0",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.4",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.12",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.3.0.3",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.12",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.2.5",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.0",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.400",
         },
         {
            model: "email gateway 7.6.2h968406",
            scope: null,
            trust: 0.3,
            vendor: "mcafee",
            version: null,
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.1.1",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.46",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.0.2",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.4.0",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.34",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.4",
         },
         {
            model: "aix",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.1",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.3",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.3.1",
         },
         {
            model: "smartcloud entry appliance fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.26",
         },
         {
            model: "smartcloud entry fixpack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.415",
         },
         {
            model: "solaris sru",
            scope: "ne",
            trust: 0.3,
            vendor: "oracle",
            version: "11.35.6",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.0",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.3.2",
         },
         {
            model: "smartcloud entry fixpack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.412",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.1.0",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.405",
         },
         {
            model: "openssh",
            scope: "ne",
            trust: 0.3,
            vendor: "openssh",
            version: "7.0",
         },
         {
            model: "smartcloud entry appliance fi",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.4.0.4",
         },
         {
            model: "linux",
            scope: "eq",
            trust: 0.3,
            vendor: "oracle",
            version: "0",
         },
         {
            model: "flex system manager",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "1.3.3.0",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.9",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.2",
         },
         {
            model: "email gateway",
            scope: "ne",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.406-3402.103",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.21",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.09",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.14",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.4",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.1",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.3.0",
         },
         {
            model: "mac os security update",
            scope: "ne",
            trust: 0.3,
            vendor: "apple",
            version: "x2015",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.4",
         },
         {
            model: "security network protection",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "5.3.2",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "9.0",
         },
         {
            model: "aix",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "6.1",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.1.0",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.218",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.1.3",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1.0.4",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.6",
         },
         {
            model: "email gateway 7.6.405h1157986",
            scope: null,
            trust: 0.3,
            vendor: "mcafee",
            version: null,
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.42",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "6.1",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.11",
         },
         {
            model: "security identity manager virtual appliance",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "7.0.1.1",
         },
         {
            model: "flex system manager",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "1.3.20",
         },
         {
            model: "openssh",
            scope: "eq",
            trust: 0.3,
            vendor: "openssh",
            version: "5.1",
         },
         {
            model: "smartcloud entry",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.1",
         },
         {
            model: "smartcloud entry appliance fi",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.3.0.4",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "4.0",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "3.2.0.411",
         },
         {
            model: "infinity",
            scope: "eq",
            trust: 0.3,
            vendor: "pexip",
            version: "7.0",
         },
         {
            model: "security identity governance and intelligence",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "5.2.1",
         },
         {
            model: "vios",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.1.9",
         },
         {
            model: "smartcloud entry appliance fp",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.2.0.3",
         },
         {
            model: "email gateway",
            scope: "eq",
            trust: 0.3,
            vendor: "mcafee",
            version: "7.6.402",
         },
         {
            model: "smartcloud entry fix pack",
            scope: "eq",
            trust: 0.3,
            vendor: "ibm",
            version: "2.4.01",
         },
         {
            model: "mac os",
            scope: "eq",
            trust: 0.3,
            vendor: "apple",
            version: "x10.10.5",
         },
      ],
      sources: [
         {
            db: "BID",
            id: "76317",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   configurations: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/configurations#",
         children: {
            "@container": "@list",
         },
         cpe_match: {
            "@container": "@list",
         },
         data: {
            "@container": "@list",
         },
         nodes: {
            "@container": "@list",
         },
      },
      data: [
         {
            CVE_data_version: "4.0",
            nodes: [
               {
                  cpe_match: [
                     {
                        cpe22Uri: "cpe:/a:openbsd:openssh",
                        vulnerable: true,
                     },
                     {
                        cpe22Uri: "cpe:/o:apple:mac_os_x",
                        vulnerable: true,
                     },
                  ],
                  operator: "OR",
               },
            ],
         },
      ],
      sources: [
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
      ],
   },
   credits: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/credits#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "Moritz Jodeit",
      sources: [
         {
            db: "BID",
            id: "76317",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
      ],
      trust: 0.9,
   },
   cve: "CVE-2015-6563",
   cvss: {
      "@context": {
         cvssV2: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#",
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2",
         },
         cvssV3: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#",
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/",
         },
         severity: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/cvss/severity#",
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
            "@id": "https://www.variotdbs.pl/ref/sources",
         },
      },
      data: [
         {
            cvssV2: [
               {
                  accessComplexity: "MEDIUM",
                  accessVector: "LOCAL",
                  authentication: "NONE",
                  author: "nvd@nist.gov",
                  availabilityImpact: "NONE",
                  baseScore: 1.9,
                  confidentialityImpact: "NONE",
                  exploitabilityScore: 3.4,
                  id: "CVE-2015-6563",
                  impactScore: 2.9,
                  integrityImpact: "PARTIAL",
                  severity: "LOW",
                  trust: 1.9,
                  vectorString: "AV:L/AC:M/Au:N/C:N/I:P/A:N",
                  version: "2.0",
               },
               {
                  accessComplexity: "MEDIUM",
                  accessVector: "LOCAL",
                  authentication: "NONE",
                  author: "VULHUB",
                  availabilityImpact: "NONE",
                  baseScore: 1.9,
                  confidentialityImpact: "NONE",
                  exploitabilityScore: 3.4,
                  id: "VHN-84524",
                  impactScore: 2.9,
                  integrityImpact: "PARTIAL",
                  severity: "LOW",
                  trust: 0.1,
                  vectorString: "AV:L/AC:M/AU:N/C:N/I:P/A:N",
                  version: "2.0",
               },
            ],
            cvssV3: [],
            severity: [
               {
                  author: "nvd@nist.gov",
                  id: "CVE-2015-6563",
                  trust: 1,
                  value: "LOW",
               },
               {
                  author: "NVD",
                  id: "CVE-2015-6563",
                  trust: 0.8,
                  value: "Low",
               },
               {
                  author: "CNNVD",
                  id: "CNNVD-201508-504",
                  trust: 0.6,
                  value: "MEDIUM",
               },
               {
                  author: "VULHUB",
                  id: "VHN-84524",
                  trust: 0.1,
                  value: "LOW",
               },
               {
                  author: "VULMON",
                  id: "CVE-2015-6563",
                  trust: 0.1,
                  value: "LOW",
               },
            ],
         },
      ],
      sources: [
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   description: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/description#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. OpenSSH (OpenBSD Secure Shell) is a set of connection tools maintained by the OpenBSD project group for secure access to remote computers. This tool is an open source implementation of the SSH protocol, which supports encryption of all transmissions and can effectively prevent eavesdropping, connection hijacking, and other network-level attacks. \nA remote code execution vulnerability exists in OpenSSH. An attacker could use this vulnerability to execute arbitrary code in the context of an affected application and may cause a denial of service. Failed exploit attempts may result in denial-of-service conditions. There is a security vulnerability in the monitor component in the sshd of OpenSSH 6.9 and earlier versions based on non-OpenBSD platforms. The vulnerability is caused by the program incorrectly receiving the external username data in the MONITOR_REQ_PAM_INIT_CTX request. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update\n2015-007\n\nOS X El Capitan 10.11.1 and Security Update 2015-007 are now\navailable and address the following:\n\nAccelerate Framework\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Visiting a maliciously crafted website may lead to arbitrary\ncode execution\nDescription:  A memory corruption issue existed in the Accelerate\nFramework in multi-threading mode. This issue was addressed through\nimproved accessor element validation and improved object locking. \nCVE-ID\nCVE-2015-5940 : Apple\n\napache_mod_php\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Multiple vulnerabilities in PHP\nDescription:  Multiple vulnerabilities existed in PHP versions prior\nto 5.5.29 and 5.4.45. These were addressed by updating PHP to\nversions 5.5.29 and 5.4.45. \nCVE-ID\nCVE-2015-0235\nCVE-2015-0273\nCVE-2015-6834\nCVE-2015-6835\nCVE-2015-6836\nCVE-2015-6837\nCVE-2015-6838\n\nATS\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Visiting a maliciously crafted webpage may lead to an\nunexpected application termination or arbitrary code execution\nDescription:  A memory corruption issue existed in ATS. This issue\nwas addressed through improved memory handling. \nCVE-ID\nCVE-2015-6985 : John Villamil (@day6reak), Yahoo Pentest Team\n\nAudio\nAvailable for:  OS X El Capitan 10.11\nImpact:  A malicious application may be able to execute arbitrary\ncode\nDescription:  An uninitialized memory issue existed in coreaudiod. \nThis issue was addressed through improved memory initialization. \nCVE-ID\nCVE-2015-7003 : Mark Brand of Google Project Zero\n\nAudio\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Playing a malicious audio file may lead to arbitrary code\nexecution\nDescription:  Multiple memory corruption issues existed in the\nhandling of audio files. These issues were addressed through improved\nmemory handling. \nCVE-ID\nCVE-2015-5933 : Apple\nCVE-2015-5934 : Apple\n\nBom\nAvailable for:  OS X El Capitan 10.11\nImpact:  Unpacking a maliciously crafted archive may lead to\narbitrary code execution\nDescription:  A file traversal vulnerability existed in the handling\nof CPIO archives. This issue was addressed through improved\nvalidation of metadata. \nCVE-ID\nCVE-2015-7006 : Mark Dowd of Azimuth Security\n\nCFNetwork\nAvailable for:  OS X El Capitan 10.11\nImpact:  Visiting a maliciously crafted website may lead to cookies\nbeing overwritten\nDescription:  A parsing issue existed when handling cookies with\ndifferent letter casing. This issue was addressed through improved\nparsing. \nCVE-ID\nCVE-2015-7023 : Marvin Scholz; Xiaofeng Zheng and Jinjin Liang of\nTsinghua University, Jian Jiang of University of California,\nBerkeley, Haixin Duan of Tsinghua University and International\nComputer Science Institute, Shuo Chen of Microsoft Research Redmond,\nTao Wan of Huawei Canada, Nicholas Weaver of International Computer\nScience Institute and University of California, Berkeley, coordinated\nvia CERT/CC\n\nconfigd\nAvailable for:  OS X El Capitan 10.11\nImpact:  A malicious application may be able to elevate privileges\nDescription:  A heap based buffer overflow issue existed in the DNS\nclient library. \nCVE-ID\nCVE-2015-7015 : PanguTeam\n\nCoreGraphics\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Visiting a maliciously crafted website may lead to arbitrary\ncode execution\nDescription:  Multiple memory corruption issues existed in\nCoreGraphics. These issues were addressed through improved memory\nhandling. \nCVE-ID\nCVE-2015-5925 : Apple\nCVE-2015-5926 : Apple\n\nCoreText\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted font file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nhandling of font files. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-6992 : John Villamil (@day6reak), Yahoo Pentest Team\n\nCoreText\nAvailable for:  OS X Yosemite v10.10.5 and OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted font file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nhandling of font files. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-6975 : John Villamil (@day6reak), Yahoo Pentest Team\n\nCoreText\nAvailable for:  OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted font file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nhandling of font files. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-7017 : John Villamil (@day6reak), Yahoo Pentest Team\n\nCoreText\nAvailable for:  OS X Mavericks v10.9.5 and OS X Yosemite v10.10.5\nImpact:  Processing a maliciously crafted font file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nhandling of font files. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-5944 : John Villamil (@day6reak), Yahoo Pentest Team\n\nDisk Images\nAvailable for:  OS X El Capitan 10.11\nImpact:  A malicious application may be able to execute arbitrary\ncode with system privileges\nDescription:  A memory corruption issue existed in the parsing of\ndisk images. This issue was addressed through improved memory\nhandling. \nCVE-ID\nCVE-2015-6995 : Ian Beer of Google Project Zero\n\nEFI\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  An attacker can exercise unused EFI functions\nDescription:  An issue existed with EFI argument handling. This was\naddressed by removing the affected functions. \nCVE-ID\nCVE-2015-7035 : Corey Kallenberg, Xeno Kovah, John Butterworth, and\nSam Cornwell of The MITRE Corporation, coordinated via CERT/CC\n\nFile Bookmark\nAvailable for:  OS X El Capitan 10.11\nImpact:  Browsing to a folder with malformed bookmarks may cause\nunexpected application termination\nDescription:  An input validation issue existed in parsing bookmark\nmetadata. This issue was addressed through improved validation\nchecks. \nCVE-ID\nCVE-2015-6987 : Luca Todesco (@qwertyoruiop)\n\nFontParser\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted font file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nhandling of font files. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-5927 : Apple\nCVE-2015-5942\nCVE-2015-6976 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-6977 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-6978 : Jaanus Kp, Clarified Security, working with HP's Zero\nDay Initiative\nCVE-2015-6991 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-6993 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-7009 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-7010 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-7018 : John Villamil (@day6reak), Yahoo Pentest Team\n\nFontParser\nAvailable for:  OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted font file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nhandling of font files. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-6990 : John Villamil (@day6reak), Yahoo Pentest Team\nCVE-2015-7008 : John Villamil (@day6reak), Yahoo Pentest Team\n\nGrand Central Dispatch\nAvailable for:  OS X Yosemite v10.10.5 and OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted package may lead to\narbitrary code execution\nDescription:  A memory corruption issue existed in the handling of\ndispatch calls. This issue was addressed through improved memory\nhandling. \nCVE-ID\nCVE-2015-6989 : Apple\n\nGraphics Drivers\nAvailable for:  OS X El Capitan 10.11\nImpact:  A local user may be able to cause unexpected system\ntermination or read kernel memory\nDescription:  Multiple out of bounds read issues existed in the\nNVIDIA graphics driver. These issues were addressed through improved\nbounds checking. \nCVE-ID\nCVE-2015-7019 : Ian Beer of Google Project Zero\nCVE-2015-7020 : Moony Li of Trend Micro\n\nGraphics Drivers\nAvailable for:  OS X El Capitan 10.11\nImpact:  A local user may be able to execute arbitrary code with\nkernel privileges\nDescription:  A memory corruption issue existed in the kernel. This\nissue was addressed through improved memory handling. \nCVE-ID\nCVE-2015-7021 : Moony Li of Trend Micro\n\nImageIO\nAvailable for:  OS X Mavericks v10.9.5 and OS X Yosemite v10.10.5\nImpact:  Processing a maliciously crafted image file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nparsing of image metadata. These issues were addressed through\nimproved metadata validation. \nCVE-ID\nCVE-2015-5935 : Apple\nCVE-2015-5938 : Apple\n\nImageIO\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Processing a maliciously crafted image file may lead to\narbitrary code execution\nDescription:  Multiple memory corruption issues existed in the\nparsing of image metadata. These issues were addressed through\nimproved metadata validation. \nCVE-ID\nCVE-2015-5936 : Apple\nCVE-2015-5937 : Apple\nCVE-2015-5939 : Apple\n\nIOAcceleratorFamily\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  A malicious application may be able to execute arbitrary\ncode with system privileges\nDescription:  A memory corruption issue existed in\nIOAcceleratorFamily. This issue was addressed through improved memory\nhandling. \nCVE-ID\nCVE-2015-6996 : Ian Beer of Google Project Zero\n\nIOHIDFamily\nAvailable for:  OS X El Capitan 10.11\nImpact:  A malicious application may be able to execute arbitrary\ncode with kernel privileges\nDescription:  A memory corruption issue existed in the kernel. This\nissue was addressed through improved memory handling. \nCVE-ID\nCVE-2015-6974 : Luca Todesco (@qwertyoruiop)\n\nKernel\nAvailable for:  OS X Yosemite v10.10.5\nImpact:  A local user may be able to execute arbitrary code with\nsystem privileges\nDescription:  A type confusion issue existed in the validation of\nMach tasks. This issue was addressed through improved Mach task\nvalidation. \nCVE-ID\nCVE-2015-5932 : Luca Todesco (@qwertyoruiop), Filippo Bigarella\n\nKernel\nAvailable for:  OS X El Capitan 10.11\nImpact:  An attacker with a privileged network position may be able\nto execute arbitrary code\nDescription:  An uninitialized memory issue existed in the kernel. \nThis issue was addressed through improved memory initialization. \nCVE-ID\nCVE-2015-6988 : The Brainy Code Scanner (m00nbsd)\n\nKernel\nAvailable for:  OS X El Capitan 10.11\nImpact:  A local application may be able to cause a denial of service\nDescription:  An issue existed when reusing virtual memory. This\nissue was addressed through improved validation. \nCVE-ID\nCVE-2015-6994 : Mark Mentovai of Google Inc. \n\nlibarchive\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  A malicious application may be able to overwrite arbitrary\nfiles\nDescription:  An issue existed within the path validation logic for\nsymlinks. This issue was addressed through improved path\nsanitization. \nCVE-ID\nCVE-2015-6984 : Christopher Crone of Infinit, Jonathan Schleifer\n\nMCX Application Restrictions\nAvailable for:  OS X Yosemite v10.10.5 and OS X El Capitan 10.11\nImpact:  A developer-signed executable may acquire restricted\nentitlements\nDescription:  An entitlement validation issue existed in Managed\nConfiguration. A developer-signed app could bypass restrictions on\nuse of restricted entitlements and elevate privileges. This issue was\naddressed through improved provisioning profile validation. \nCVE-ID\nCVE-2015-7016 : Apple\n\nNet-SNMP\nAvailable for:  OS X El Capitan 10.11\nImpact:  An attacker in a privileged network position may be able to\ncause a denial of service\nDescription:  Multiple issues existed in netsnmp version 5.6. These\nissues were addressed by using patches affecting OS X from upstream. \nCVE-ID\nCVE-2012-6151\nCVE-2014-3565\n\nOpenGL\nAvailable for:  OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,\nand OS X El Capitan 10.11\nImpact:  Visiting a maliciously crafted website may lead to arbitrary\ncode execution\nDescription:  A memory corruption issue existed in OpenGL. This issue\nwas addressed through improved memory handling. \nCVE-ID\nCVE-2015-5924 : Apple\n\nOpenSSH\nAvailable for:  OS X El Capitan 10.11\nImpact:  A local user may be able to conduct impersonation attacks\nDescription:  A privilege separation issue existed in PAM support. \nThis issue was addressed with improved authorization checks. \nCVE-ID\nCVE-2015-6563 : Moritz Jodeit of Blue Frost Security GmbH\n\nSandbox\nAvailable for:  OS X El Capitan 10.11\nImpact:  A local user may be able to execute arbitrary code with\nkernel privileges\nDescription:  An input validation issue existed when handling NVRAM\nparameters. This issue was addressed through improved validation. \nCVE-ID\nCVE-2015-5945 : Rich Trouton (@rtrouton), Howard Hughes Medical\nInstitute, Apple\n\nScript Editor\nAvailable for:  OS X El Capitan 10.11\nImpact:  An attacker may trick a user into running arbitrary\nAppleScript\nDescription:  In some circumstances, Script Editor did not ask for\nuser confirmation before executing AppleScripts. This issue was\naddressed by prompting for user confirmation before executing\nAppleScripts. \nCVE-ID\nCVE-2015-7007 : Joe Vennix of Rapid7\n\nSecurity\nAvailable for:  OS X El Capitan 10.11\nImpact:  A malicious application may be able to overwrite arbitrary\nfiles\nDescription:  A double free issue existed in the handling of\nAtomicBufferedFile descriptors. This issue was addressed through\nimproved validation of AtomicBufferedFile descriptors. \nCVE-ID\nCVE-2015-6983 : David Benjamin, Greg Kerr, Mark Mentovai and Sergey\nUlanov from the Chrome Team\n\nSecurityAgent\nAvailable for:  OS X El Capitan 10.11\nImpact:  A malicious application can programmatically control\nkeychain access prompts\nDescription:  A method existed for applications to create synthetic\nclicks on keychain prompts. This was addressed by disabling synthetic\nclicks for keychain access windows. \nCVE-ID\nCVE-2015-5943\n\nInstallation note:\n\nOS X El Capitan v10.11.1 includes the security content of\nSafari 9.0.1: https://support.apple.com/kb/HT205377\n\nOS X El Capitan 10.11.1 and Security Update 2015-007 may be obtained\nfrom the Mac App Store or Apple's Software Downloads web site:\nhttp://www.apple.com/support/downloads/\n\nInformation will also be posted to the Apple Security Updates\nweb site: https://support.apple.com/kb/HT201222\n\nThis message is signed with Apple's Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\nComment: GPGTools - http://gpgtools.org\n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\n4GbuRXld4PbxeDdel0Nk\n=snJ4\n-----END PGP SIGNATURE-----\n. 6) - i386, x86_64\n\n3. \n\nSecurity Fix(es):\n\n* It was found that the OpenSSH client did not properly enforce the\nForwardX11Timeout setting. A malicious or compromised remote X application\ncould possibly use this flaw to establish a trusted connection to the local\nX server, even if only untrusted X11 forwarding was requested. (CVE-2015-6564)\n\n* An access flaw was discovered in OpenSSH; the OpenSSH client did not\ncorrectly handle failures to generate authentication cookies for untrusted\nX11 forwarding. A malicious or compromised remote X application could\npossibly use this flaw to establish a trusted connection to the local X\nserver, even if only untrusted X11 forwarding was requested. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Moderate: openssh security, bug fix, and enhancement update\nAdvisory ID:       RHSA-2015:2088-06\nProduct:           Red Hat Enterprise Linux\nAdvisory URL:      https://rhn.redhat.com/errata/RHSA-2015-2088.html\nIssue date:        2015-11-19\nCVE Names:         CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 \n=====================================================================\n\n1. Summary:\n\nUpdated openssh packages that fix multiple security issues, several bugs,\nand add various enhancements are now available for Red Hat Enterprise\nLinux 7. \n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Client (v. 7) - x86_64\nRed Hat Enterprise Linux Client Optional (v. 7) - x86_64\nRed Hat Enterprise Linux ComputeNode (v. 7) - x86_64\nRed Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64\nRed Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64\nRed Hat Enterprise Linux Server Optional (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64\nRed Hat Enterprise Linux Workstation (v. 7) - x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 7) - x86_64\n\n3. Description:\n\nOpenSSH is OpenBSD's SSH (Secure Shell) protocol implementation. These\npackages include the core files necessary for both the OpenSSH client and\nserver. \n\nA flaw was found in the way OpenSSH handled PAM authentication when using\nprivilege separation. An attacker with valid credentials on the system and\nable to fully compromise a non-privileged pre-authentication process using\na different flaw could use this flaw to authenticate as other users. \n(CVE-2015-6563)\n\nA use-after-free flaw was found in OpenSSH. (CVE-2015-6564)\n\nIt was discovered that the OpenSSH sshd daemon did not check the list of\nkeyboard-interactive authentication methods for duplicates. A remote\nattacker could use this flaw to bypass the MaxAuthTries limit, making it\neasier to perform password guessing attacks. (CVE-2015-5600)\n\nIt was found that the OpenSSH ssh-agent, a program to hold private keys\nused for public key authentication, was vulnerable to password guessing\nattacks. An attacker able to connect to the agent could use this flaw to\nconduct a brute-force attack to unlock keys in the ssh-agent. (BZ#1238238)\n\nThis update fixes the following bugs:\n\n* Previously, the sshd_config(5) man page was misleading and could thus\nconfuse the user. This update improves the man page text to clearly\ndescribe the AllowGroups feature. (BZ#1150007)\n\n* The limit for the function for restricting the number of files listed\nusing the wildcard character (*) that prevents the Denial of Service (DoS)\nfor both server and client was previously set too low. Consequently, the\nuser reaching the limit was prevented from listing a directory with a large\nnumber of files over Secure File Transfer Protocol (SFTP). This update\nincreases the aforementioned limit, thus fixing this bug. (BZ#1160377)\n\n* When the ForceCommand option with a pseudoterminal was used and the\nMaxSession option was set to \"2\", multiplexed SSH connections did not work\nas expected. After the user attempted to open a second multiplexed\nconnection, the attempt failed if the first connection was still open. This\nupdate modifies OpenSSH to issue only one audit message per session, and\nthe user is thus able to open two multiplexed connections in this\nsituation. (BZ#1199112)\n\n* The ssh-copy-id utility failed if the account on the remote server did\nnot use an sh-like shell. Remote commands have been modified to run in an\nsh-like shell, and ssh-copy-id now works also with non-sh-like shells. \n(BZ#1201758)\n\n* Due to a race condition between auditing messages and answers when using\nControlMaster multiplexing, one session in the shared connection randomly\nand unexpectedly exited the connection. This update fixes the race\ncondition in the auditing code, and multiplexing connections now work as\nexpected even with a number of sessions created at once. (BZ#1240613)\n\nIn addition, this update adds the following enhancements:\n\n* As not all Lightweight Directory Access Protocol (LDAP) servers possess\na default schema, as expected by the ssh-ldap-helper program, this update\nprovides the user with an ability to adjust the LDAP query to get public\nkeys from servers with a different schema, while the default functionality\nstays untouched. (BZ#1201753)\n\n* With this enhancement update, the administrator is able to set\npermissions for files uploaded using Secure File Transfer Protocol (SFTP). \n(BZ#1197989)\n\n* This update provides the LDAP schema in LDAP Data Interchange Format\n(LDIF) format as a complement to the old schema previously accepted\nby OpenLDAP. (BZ#1184938)\n\n* With this update, the user can selectively disable the Generic Security\nServices API (GSSAPI) key exchange algorithms as any normal key exchange. \n(BZ#1253062)\n\nUsers of openssh are advised to upgrade to these updated packages, which\ncorrect these issues and add these enhancements. \n\n4. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. \n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1125110 - pam_namespace usage is not consistent across system-wide PAM configuration\n1160377 - sftp is failing using wildcards and many files\n1178116 - Default selinux policy prevents ssh-ldap-helper from connecting to LDAP server\n1181591 - No Documentation= line in the sshd.service file\n1184938 - Provide LDIF version of LPK schema\n1187597 - sshd -T does not show all (default) options, inconsistency\n1197666 - ssh client using HostbasedAuthentication aborts in FIPS mode\n1197989 - RFE: option to let openssh/sftp force the exact permissions on newly uploaded files\n1238238 - openssh: weakness of agent locking (ssh-add -x) to password guessing\n1245969 - CVE-2015-5600 openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices\n1252844 - CVE-2015-6563 openssh: Privilege separation weakness related to PAM support\n1252852 - CVE-2015-6564 openssh: Use-after-free bug related to PAM support\n\n6. Package List:\n\nRed Hat Enterprise Linux Client (v. 7):\n\nSource:\nopenssh-6.6.1p1-22.el7.src.rpm\n\nx86_64:\nopenssh-6.6.1p1-22.el7.x86_64.rpm\nopenssh-askpass-6.6.1p1-22.el7.x86_64.rpm\nopenssh-clients-6.6.1p1-22.el7.x86_64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-keycat-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-6.6.1p1-22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Client Optional (v. 7):\n\nx86_64:\nopenssh-debuginfo-6.6.1p1-22.el7.i686.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-ldap-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.x86_64.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.i686.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nopenssh-6.6.1p1-22.el7.src.rpm\n\nx86_64:\nopenssh-6.6.1p1-22.el7.x86_64.rpm\nopenssh-clients-6.6.1p1-22.el7.x86_64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-keycat-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-6.6.1p1-22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux ComputeNode Optional (v. 7):\n\nx86_64:\nopenssh-askpass-6.6.1p1-22.el7.x86_64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.i686.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-ldap-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.x86_64.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.i686.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 7):\n\nSource:\nopenssh-6.6.1p1-22.el7.src.rpm\n\naarch64:\nopenssh-6.6.1p1-22.el7.aarch64.rpm\nopenssh-clients-6.6.1p1-22.el7.aarch64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.aarch64.rpm\nopenssh-keycat-6.6.1p1-22.el7.aarch64.rpm\nopenssh-server-6.6.1p1-22.el7.aarch64.rpm\n\nppc64:\nopenssh-6.6.1p1-22.el7.ppc64.rpm\nopenssh-askpass-6.6.1p1-22.el7.ppc64.rpm\nopenssh-clients-6.6.1p1-22.el7.ppc64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.ppc64.rpm\nopenssh-keycat-6.6.1p1-22.el7.ppc64.rpm\nopenssh-server-6.6.1p1-22.el7.ppc64.rpm\n\nppc64le:\nopenssh-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-askpass-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-clients-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-keycat-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-server-6.6.1p1-22.el7.ppc64le.rpm\n\ns390x:\nopenssh-6.6.1p1-22.el7.s390x.rpm\nopenssh-askpass-6.6.1p1-22.el7.s390x.rpm\nopenssh-clients-6.6.1p1-22.el7.s390x.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.s390x.rpm\nopenssh-keycat-6.6.1p1-22.el7.s390x.rpm\nopenssh-server-6.6.1p1-22.el7.s390x.rpm\n\nx86_64:\nopenssh-6.6.1p1-22.el7.x86_64.rpm\nopenssh-askpass-6.6.1p1-22.el7.x86_64.rpm\nopenssh-clients-6.6.1p1-22.el7.x86_64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-keycat-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-6.6.1p1-22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 7):\n\naarch64:\nopenssh-askpass-6.6.1p1-22.el7.aarch64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.aarch64.rpm\nopenssh-ldap-6.6.1p1-22.el7.aarch64.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.aarch64.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.aarch64.rpm\n\nppc64:\nopenssh-debuginfo-6.6.1p1-22.el7.ppc.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.ppc64.rpm\nopenssh-ldap-6.6.1p1-22.el7.ppc64.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.ppc64.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.ppc.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.ppc64.rpm\n\nppc64le:\nopenssh-debuginfo-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-ldap-6.6.1p1-22.el7.ppc64le.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.ppc64le.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.ppc64le.rpm\n\ns390x:\nopenssh-debuginfo-6.6.1p1-22.el7.s390.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.s390x.rpm\nopenssh-ldap-6.6.1p1-22.el7.s390x.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.s390x.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.s390.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.s390x.rpm\n\nx86_64:\nopenssh-debuginfo-6.6.1p1-22.el7.i686.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-ldap-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.x86_64.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.i686.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nopenssh-6.6.1p1-22.el7.src.rpm\n\nx86_64:\nopenssh-6.6.1p1-22.el7.x86_64.rpm\nopenssh-askpass-6.6.1p1-22.el7.x86_64.rpm\nopenssh-clients-6.6.1p1-22.el7.x86_64.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-keycat-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-6.6.1p1-22.el7.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. 7):\n\nx86_64:\nopenssh-debuginfo-6.6.1p1-22.el7.i686.rpm\nopenssh-debuginfo-6.6.1p1-22.el7.x86_64.rpm\nopenssh-ldap-6.6.1p1-22.el7.x86_64.rpm\nopenssh-server-sysvinit-6.6.1p1-22.el7.x86_64.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.i686.rpm\npam_ssh_agent_auth-0.9.3-9.22.el7.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2015-5600\nhttps://access.redhat.com/security/cve/CVE-2015-6563\nhttps://access.redhat.com/security/cve/CVE-2015-6564\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is <secalert@redhat.com>. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2015 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFWTj/BXlSAg2UNWIIRAgIEAJ4+Nlu4NsYtiDloNVrVn2F/vT/9kACdEHqE\nh3XwDOy3+OSs/h1DEpVBtV0=\n=x/s+\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 201512-04\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                           https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n    Title: OpenSSH: Multiple vulnerabilities\n     Date: December 20, 2015\n     Bugs: #553724, #555518, #557340\n       ID: 201512-04\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in OpenSSH, the worst of which\ncould lead to arbitrary code execution, or cause a Denial of Service\ncondition. Please review\nthe CVE identifiers referenced below for details. \n\nImpact\n======\n\n\n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll OpenSSH users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \">=net-misc/openssh-6.9_p1-r2\"\n\nReferences\n==========\n\n[ 1 ] CVE-2015-5352\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5352\n[ 2 ] CVE-2015-5600\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5600\n[ 3 ] CVE-2015-6563\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6563\n[ 4 ] CVE-2015-6564\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6564\n[ 5 ] CVE-2015-6565\n      http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-6565\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201512-04\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users' machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2015 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n",
      sources: [
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
         {
            db: "BID",
            id: "76317",
         },
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            db: "PACKETSTORM",
            id: "134055",
         },
         {
            db: "PACKETSTORM",
            id: "136959",
         },
         {
            db: "PACKETSTORM",
            id: "134475",
         },
         {
            db: "PACKETSTORM",
            id: "135009",
         },
      ],
      trust: 2.97,
   },
   external_ids: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            db: "NVD",
            id: "CVE-2015-6563",
            trust: 3.3,
         },
         {
            db: "BID",
            id: "76317",
            trust: 2.7,
         },
         {
            db: "SIEMENS",
            id: "SSA-412672",
            trust: 1.8,
         },
         {
            db: "OPENWALL",
            id: "OSS-SECURITY/2015/08/22/1",
            trust: 1.8,
         },
         {
            db: "JVN",
            id: "JVNVU92655282",
            trust: 0.8,
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
            trust: 0.8,
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
            trust: 0.7,
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
            trust: 0.6,
         },
         {
            db: "JUNIPER",
            id: "JSA10774",
            trust: 0.3,
         },
         {
            db: "VULHUB",
            id: "VHN-84524",
            trust: 0.1,
         },
         {
            db: "ICS CERT",
            id: "ICSA-22-349-21",
            trust: 0.1,
         },
         {
            db: "VULMON",
            id: "CVE-2015-6563",
            trust: 0.1,
         },
         {
            db: "PACKETSTORM",
            id: "134055",
            trust: 0.1,
         },
         {
            db: "PACKETSTORM",
            id: "136959",
            trust: 0.1,
         },
         {
            db: "PACKETSTORM",
            id: "134475",
            trust: 0.1,
         },
         {
            db: "PACKETSTORM",
            id: "135009",
            trust: 0.1,
         },
      ],
      sources: [
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            db: "BID",
            id: "76317",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "PACKETSTORM",
            id: "134055",
         },
         {
            db: "PACKETSTORM",
            id: "136959",
         },
         {
            db: "PACKETSTORM",
            id: "134475",
         },
         {
            db: "PACKETSTORM",
            id: "135009",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   id: "VAR-201508-0112",
   iot: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/iot#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: true,
      sources: [
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
      ],
      trust: 0.01,
   },
   last_update_date: "2024-11-23T21:25:42.777000Z",
   patch: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/patch#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            title: "APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007",
            trust: 0.8,
            url: "http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html",
         },
         {
            title: "HT205375",
            trust: 0.8,
            url: "https://support.apple.com/en-us/HT205375",
         },
         {
            title: "HT205375",
            trust: 0.8,
            url: "https://support.apple.com/ja-jp/HT205375",
         },
         {
            title: "Don't resend username to PAM; it already has it.",
            trust: 0.8,
            url: "https://github.com/openssh/openssh-portable/commit/d4697fe9a28dab7255c60433e4dd23cf7fce8a8b",
         },
         {
            title: "release-7.0",
            trust: 0.8,
            url: "http://www.openssh.com/txt/release-7.0",
         },
         {
            title: "OpenSSH sshd monitor Fixes for component input validation vulnerabilities",
            trust: 0.6,
            url: "http://123.124.177.30/web/xxk/bdxqById.tag?id=90847",
         },
         {
            title: "Red Hat: Moderate: openssh security, bug fix, and enhancement update",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152088 - Security Advisory",
         },
         {
            title: "Red Hat: CVE-2015-6563",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2015-6563",
         },
         {
            title: "Debian CVElist Bug Report Logs: openssh: CVE-2015-6563 CVE-2015-6564",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=73eb91ff53511af2767cd29878bd74dc",
         },
         {
            title: "Amazon Linux AMI: ALAS-2015-592",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-592",
         },
         {
            title: "Amazon Linux AMI: ALAS-2015-625",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-625",
         },
         {
            title: "Symantec Security Advisories: SA104 : OpenSSH Vulnerabilities",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories&qid=b643e473a764678a8d1ded300d5699b6",
         },
         {
            title: "Oracle Linux Bulletins: Oracle Linux Bulletin - April 2016",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=83bbd91f8369c8f064e6d68dac68400f",
         },
         {
            title: "Oracle Linux Bulletins: Oracle Linux Bulletin - October 2015",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=435ed9abc2fb1e74ce2a69605a01e326",
         },
         {
            title: "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - January 2016",
            trust: 0.1,
            url: "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=eb439566c9130adc92d21bc093204cf8",
         },
         {
            title: "manual-detection",
            trust: 0.1,
            url: "https://github.com/CyCognito/manual-detection ",
         },
         {
            title: "DC-2-Vulnhub-Walkthrough",
            trust: 0.1,
            url: "https://github.com/vshaliii/DC-2-Vulnhub-Walkthrough ",
         },
         {
            title: "DC-1-Vulnhub-Walkthrough",
            trust: 0.1,
            url: "https://github.com/vshaliii/DC-1-Vulnhub-Walkthrough ",
         },
      ],
      sources: [
         {
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
      ],
   },
   problemtype_data: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            problemtype: "CWE-20",
            trust: 1.9,
         },
      ],
      sources: [
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   references: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/references#",
         data: {
            "@container": "@list",
         },
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: [
         {
            trust: 3,
            url: "http://www.securityfocus.com/bid/76317",
         },
         {
            trust: 2.1,
            url: "http://www.openssh.com/txt/release-7.0",
         },
         {
            trust: 2.1,
            url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
         },
         {
            trust: 2.1,
            url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
         },
         {
            trust: 2.1,
            url: "https://github.com/openssh/openssh-portable/commit/d4697fe9a28dab7255c60433e4dd23cf7fce8a8b",
         },
         {
            trust: 1.9,
            url: "https://security.gentoo.org/glsa/201512-04",
         },
         {
            trust: 1.9,
            url: "http://rhn.redhat.com/errata/rhsa-2016-0741.html",
         },
         {
            trust: 1.8,
            url: "http://lists.apple.com/archives/security-announce/2015/oct/msg00005.html",
         },
         {
            trust: 1.8,
            url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
         },
         {
            trust: 1.8,
            url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
         },
         {
            trust: 1.8,
            url: "https://security.netapp.com/advisory/ntap-20180201-0002/",
         },
         {
            trust: 1.8,
            url: "https://support.apple.com/ht205375",
         },
         {
            trust: 1.8,
            url: "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-766",
         },
         {
            trust: 1.8,
            url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-august/165170.html",
         },
         {
            trust: 1.8,
            url: "http://seclists.org/fulldisclosure/2015/aug/54",
         },
         {
            trust: 1.8,
            url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
         },
         {
            trust: 1.8,
            url: "http://www.openwall.com/lists/oss-security/2015/08/22/1",
         },
         {
            trust: 1.8,
            url: "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html",
         },
         {
            trust: 0.8,
            url: "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-6563",
         },
         {
            trust: 0.8,
            url: "http://jvn.jp/vu/jvnvu92655282/",
         },
         {
            trust: 0.8,
            url: "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-6563",
         },
         {
            trust: 0.4,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6563",
         },
         {
            trust: 0.3,
            url: "https://access.redhat.com/security/cve/cve-2015-6563",
         },
         {
            trust: 0.3,
            url: "https://github.com/openssh/openssh-portable/commit/5e75f5198769056089fb06c4d738ab0e5abc66f7 ",
         },
         {
            trust: 0.3,
            url: "http://www.openssh.com",
         },
         {
            trust: 0.3,
            url: "https://kb.juniper.net/infocenter/index?page=content&id=jsa10774&actp=rss",
         },
         {
            trust: 0.3,
            url: "http://aix.software.ibm.com/aix/efixes/security/openssh_advisory6.asc",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=isg3t1024087",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=isg3t1024669",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=nas8n1021524",
         },
         {
            trust: 0.3,
            url: "http://www.pexip.com/sites/pexip/files/pexip_security_bulletin_2015-08-21.pdf",
         },
         {
            trust: 0.3,
            url: "https://kc.mcafee.com/resources/sites/mcafee/content/live/product_documentation/27000/pd27128/en_us/meg_7_6_406_3402_103_release_notes_en_us.pdf",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=ssg1s1009325",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=swg21987978",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=swg21988706",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=swg21990741",
         },
         {
            trust: 0.3,
            url: "http://www-01.ibm.com/support/docview.wss?uid=swg21992927",
         },
         {
            trust: 0.3,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6564",
         },
         {
            trust: 0.2,
            url: "https://www.redhat.com/mailman/listinfo/rhsa-announce",
         },
         {
            trust: 0.2,
            url: "https://access.redhat.com/security/cve/cve-2015-6564",
         },
         {
            trust: 0.2,
            url: "https://bugzilla.redhat.com/):",
         },
         {
            trust: 0.2,
            url: "https://access.redhat.com/security/team/key/",
         },
         {
            trust: 0.2,
            url: "https://access.redhat.com/articles/11258",
         },
         {
            trust: 0.2,
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            trust: 0.2,
            url: "https://access.redhat.com/security/team/contact/",
         },
         {
            trust: 0.2,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5352",
         },
         {
            trust: 0.2,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5600",
         },
         {
            trust: 0.1,
            url: "https://cwe.mitre.org/data/definitions/20.html",
         },
         {
            trust: 0.1,
            url: "https://access.redhat.com/errata/rhsa-2015:2088",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov",
         },
         {
            trust: 0.1,
            url: "https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-21",
         },
         {
            trust: 0.1,
            url: "http://tools.cisco.com/security/center/viewalert.x?alertid=41651",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5925",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5936",
         },
         {
            trust: 0.1,
            url: "https://support.apple.com/kb/ht201222",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6836",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-0235",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5943",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5924",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5945",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6834",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5935",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5944",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5942",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2014-3565",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6837",
         },
         {
            trust: 0.1,
            url: "http://www.apple.com/support/downloads/",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5940",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5927",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5933",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5939",
         },
         {
            trust: 0.1,
            url: "https://support.apple.com/kb/ht205377",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5934",
         },
         {
            trust: 0.1,
            url: "https://www.apple.com/support/security/pgp/",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6835",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6838",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2012-6151",
         },
         {
            trust: 0.1,
            url: "http://gpgtools.org",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5938",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6974",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-0273",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5926",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5937",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-5932",
         },
         {
            trust: 0.1,
            url: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/6.8_release_notes/index.html",
         },
         {
            trust: 0.1,
            url: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/6.8_technical_notes/index.html",
         },
         {
            trust: 0.1,
            url: "https://access.redhat.com/security/cve/cve-2015-5352",
         },
         {
            trust: 0.1,
            url: "https://access.redhat.com/security/cve/cve-2016-1908",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2016-1908",
         },
         {
            trust: 0.1,
            url: "https://rhn.redhat.com/errata/rhsa-2015-2088.html",
         },
         {
            trust: 0.1,
            url: "https://access.redhat.com/security/cve/cve-2015-5600",
         },
         {
            trust: 0.1,
            url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5352",
         },
         {
            trust: 0.1,
            url: "http://creativecommons.org/licenses/by-sa/2.5",
         },
         {
            trust: 0.1,
            url: "https://nvd.nist.gov/vuln/detail/cve-2015-6565",
         },
         {
            trust: 0.1,
            url: "https://bugs.gentoo.org.",
         },
         {
            trust: 0.1,
            url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-6565",
         },
         {
            trust: 0.1,
            url: "https://security.gentoo.org/",
         },
         {
            trust: 0.1,
            url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5600",
         },
         {
            trust: 0.1,
            url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-6563",
         },
         {
            trust: 0.1,
            url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-6564",
         },
      ],
      sources: [
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            db: "BID",
            id: "76317",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "PACKETSTORM",
            id: "134055",
         },
         {
            db: "PACKETSTORM",
            id: "136959",
         },
         {
            db: "PACKETSTORM",
            id: "134475",
         },
         {
            db: "PACKETSTORM",
            id: "135009",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   sources: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/sources#",
         data: {
            "@container": "@list",
         },
      },
      data: [
         {
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            db: "BID",
            id: "76317",
         },
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            db: "PACKETSTORM",
            id: "134055",
         },
         {
            db: "PACKETSTORM",
            id: "136959",
         },
         {
            db: "PACKETSTORM",
            id: "134475",
         },
         {
            db: "PACKETSTORM",
            id: "135009",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
         {
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   sources_release_date: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
         data: {
            "@container": "@list",
         },
      },
      data: [
         {
            date: "2015-08-24T00:00:00",
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            date: "2015-08-24T00:00:00",
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            date: "2015-08-12T00:00:00",
            db: "BID",
            id: "76317",
         },
         {
            date: "2015-08-26T00:00:00",
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            date: "2015-10-21T19:32:22",
            db: "PACKETSTORM",
            id: "134055",
         },
         {
            date: "2016-05-11T13:59:48",
            db: "PACKETSTORM",
            id: "136959",
         },
         {
            date: "2015-11-20T00:47:23",
            db: "PACKETSTORM",
            id: "134475",
         },
         {
            date: "2015-12-21T23:23:00",
            db: "PACKETSTORM",
            id: "135009",
         },
         {
            date: "2015-08-13T00:00:00",
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
         {
            date: "2015-08-25T00:00:00",
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            date: "2015-08-24T01:59:00.127000",
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   sources_update_date: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
         data: {
            "@container": "@list",
         },
      },
      data: [
         {
            date: "2022-12-13T00:00:00",
            db: "VULHUB",
            id: "VHN-84524",
         },
         {
            date: "2022-12-13T00:00:00",
            db: "VULMON",
            id: "CVE-2015-6563",
         },
         {
            date: "2017-12-19T22:37:00",
            db: "BID",
            id: "76317",
         },
         {
            date: "2015-10-27T00:00:00",
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
         {
            date: "2015-08-13T00:00:00",
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
         {
            date: "2022-12-14T00:00:00",
            db: "CNNVD",
            id: "CNNVD-201508-504",
         },
         {
            date: "2024-11-21T02:35:13.290000",
            db: "NVD",
            id: "CVE-2015-6563",
         },
      ],
   },
   threat_type: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "remote",
      sources: [
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
      ],
      trust: 0.6,
   },
   title: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/title#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "OpenBSD Run on other platforms  OpenSSH of  sshd Vulnerabilities that allow spoofing attacks in the monitor component",
      sources: [
         {
            db: "JVNDB",
            id: "JVNDB-2015-004403",
         },
      ],
      trust: 0.8,
   },
   type: {
      "@context": {
         "@vocab": "https://www.variotdbs.pl/ref/type#",
         sources: {
            "@container": "@list",
            "@context": {
               "@vocab": "https://www.variotdbs.pl/ref/sources#",
            },
         },
      },
      data: "code injection",
      sources: [
         {
            db: "CNNVD",
            id: "CNNVD-201508-115",
         },
      ],
      trust: 0.6,
   },
}