CVE-2015-8325

Name	CVE-2015-8325
Description	The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-3550-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openssh (PTS)	buster	1:7.9p1-10+deb10u2	fixed
	buster (security)	1:7.9p1-10+deb10u4	fixed
	bullseye (security), bullseye	1:8.4p1-5+deb11u3	fixed
	bookworm, bookworm (security)	1:9.2p1-2+deb12u2	fixed
	trixie	1:9.6p1-4	fixed
	sid	1:9.7p1-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
openssh	source	wheezy	1:6.0p1-4+deb7u4	DSA-3550-1
openssh	source	jessie	1:6.7p1-5+deb8u2	DSA-3550-1
openssh	source	(unstable)	1:7.2p2-3

Upstream fix: https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755