CVE-2015-8325: canonical ubuntu_core
Vulnerability summary
CVE-2015-8325 is a high (CVSS 7.8) vulnerability in canonical ubuntu_core. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 48.8% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 6Timeline
- 01-05-2016PublishedVulnerability first disclosed.
- 22-05-2026Last modifiedVulnerability information updated.
Description
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
CVSS metrics
9 scores · 6 sources · 3 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.60%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.60% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
- CWE-1262Improper Access Control for Register InterfaceThe product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat9 products
- openssh< 0:5.3p1-122.el6 | < 0:6.6.1p1-31.el7
- openssh-askpass< 0:5.3p1-122.el6 | < 0:6.6.1p1-31.el7
- openssh-clients< 0:5.3p1-122.el6 | < 0:6.6.1p1-31.el7
- openssh-debuginfo< 0:5.3p1-122.el6 | < 0:6.6.1p1-31.el7
- openssh-keycat< 0:6.6.1p1-31.el7
Canonical3 products
- ubuntu_core15.04
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
- ubuntu_touch15.04
Debian2 products
- openssh< 1:7.2p2-3 | < 1:6.0p1-4+deb7u4 | < 1:6.7p1-5+deb8u2
- debian_linuxEOL7.0 | 8.0
Alpine1 product
- openssh< 6.8_p1-r10
Openbsd1 product
- openssh≤ 7.2
Ubuntu1 product
- openssh< 1:6.6p1-2ubuntu2.7
6 vendors · 17 products
References
42 links- www.securityfocus.com/bid/86187VDB Entry
www.debian.org/security/2016/dsa-3550Vendor Advisory- rhn.redhat.com/errata/RHSA-2017-0641.htmlVendor Advisory
- rhn.redhat.com/errata/RHSA-2016-2588.htmlVendor Advisory
- www.securitytracker.com/id/1036487VDB Entry
- security.gentoo.org/glsa/201612-18Vendor Advisory
