1

I want to mitigate CVE-2016-3115. The report from OpenSSH states that the vulnerability exists when X11Forwarding is enabled. It shows as enabled in my /etc/ssh/sshd_config, but I don't know why. It's a server that I only access via SSH (PuTTY) and SFTP. What are the possible issues that could come from disabling X11Forwarding?

Improve this question

1 Answer 1

Reset to default
1

If you are accessing server using ssh and PuTTY and using only command-line utilities, you are good to disable X11 forwarding.

X11 forwarding is needed only if you want to run X11 applications (graphical, window) on the remote server and have them displayed on your local desktop.

Also you didn't specify which Ubuntu version you are using, but currently I don't see in changelog, that this patch was backported even to 15.10.

Improve this answer
2
  • 12.04 LTS. This page doesn't show that it still "needs-triage" people.canonical.com/~ubuntu-security/cve/2016/…
    – Sonny
    Apr 21, 2016 at 18:37
  • 1
    Yes. That is the correct place to find it :) Thanks for link. I didn't know that one. But the fact is that the setup which would allow to exploit this bug is really specific.
    – Jakuje
    Apr 21, 2016 at 18:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .