Debian/openssh: medium 4.9

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located

Action: Upgrade openssh to 1:6.6p1-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2014-2532#Debian:13/openssh
• https://security-tracker.debian.org/tracker/CVE-2014-2532

published 2014-03-18T05:18:19Z · modified 2026-10-23T16:00:31.005486024Z · JSON