OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the from option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Openssh | Openbsd | * | 2.9.9 (including) |
Red Hat Linux 7.0 | RedHat | * | |
Red Hat Linux 7.1 | RedHat | * | |
Red Hat Linux 7.2 | RedHat | * |