CVE Feed

    Dashboard / CVE / CVE-2015-8325

    CVE-2015-8325

    The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.

    Published:Apr 13, 2016
    Last Modified:May 22, 2026
    EPS:May 1, 2016
    EPSS Score:0.0009
    CVSS Score:7.8

    Affected Products

    Vendor
    Canonical
    Product
    Ubuntu Core
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Canonical
    Product
    Ubuntu Touch
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Openbsd
    Product
    Openssh
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-680 Exploitation of Improperly Controlled Registers

    References

    http://rhn.redhat.com/errata/RHSA-2016-2588.html
    http://rhn.redhat.com/errata/RHSA-2017-0641.html
    http://www.debian.org/security/2016/dsa-3550
    http://www.securityfocus.com/bid/86187
    http://www.securitytracker.com/id/1036487
    https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
    https://bugzilla.redhat.com/show_bug.cgi?id=1328012
    https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
    https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html
    https://security-tracker.debian.org/tracker/CVE-2015-8325
    https://security.gentoo.org/glsa/201612-18
    https://security.netapp.com/advisory/ntap-20180628-0001/
    http://rhn.redhat.com/errata/RHSA-2016-2588.html
    http://rhn.redhat.com/errata/RHSA-2017-0641.html
    http://www.debian.org/security/2016/dsa-3550
    http://www.securityfocus.com/bid/86187
    http://www.securitytracker.com/id/1036487
    https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
    https://bugzilla.redhat.com/show_bug.cgi?id=1328012
    https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
    https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html
    https://security-tracker.debian.org/tracker/CVE-2015-8325
    https://security.gentoo.org/glsa/201612-18
    https://security.netapp.com/advisory/ntap-20180628-0001/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High