CVE-2016-3115

CVE-2016-3115 describes multiple CRLF injection vulnerabilities in OpenSSH versions prior to 7.2p2, specifically affecting the sshd component. These flaws, found in the do_authenticated1 and session_x11_req functions, allow remote authenticated users to bypass shell-command restrictions through crafted X11 forwarding data. The vulnerability carries a CVSS v3 score of 6.4 (Medium), indicating a network-based attack with low complexity, requiring low privileges, and potentially leading to low confidentiality and integrity impacts. While not listed in CISA's KEV catalog and lacking Metasploit/Nuclei modules, an ExploitDB entry (EDB-39569) exists, suggesting proof-of-concept exploit code is available, though there is no evidence of widespread active exploitation or significant community discussion.