CVE:CVE-2016-1908
CNNVD:CNNVD-201603-248
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。client是其中的一个客户端。
OpenSSH 7.2之前的版本中的client存在安全漏洞，该漏洞源于程序没有正确的处理生成身份验证cookie失败的情况。攻击者可利用该漏洞获取信任的X11转发权限。
solution:Upgrade openbsd openssh to a higher version than 7.2,and avoid the version (,7.2); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade oracle linux to a higher version than 6,7,and avoid the version 6,7; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.6,7.7,and avoid the version 7.2,7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0