Home / ubuntu / Questions / 760081
Accepted
Sonny
Asked: 2016-04-22 10:02:48 +0800 CST

Mitigating CVE-2016-3115 By Disabling X11Forwarding

  • 772

I want to mitigate CVE-2016-3115. The report from OpenSSH states that the vulnerability exists when X11Forwarding is enabled. It shows as enabled in my /etc/ssh/sshd_config, but I don't know why. It's a server that I only access via SSH (PuTTY) and SFTP. What are the possible issues that could come from disabling X11Forwarding?

openssh

1 Answers

  1. Best Answer

    If you are accessing server using ssh and PuTTY and using only command-line utilities, you are good to disable X11 forwarding.

    X11 forwarding is needed only if you want to run X11 applications (graphical, window) on the remote server and have them displayed on your local desktop.

    Also you didn't specify which Ubuntu version you are using, but currently I don't see in changelog, that this patch was backported even to 15.10.

    • 1