CVE-2016-6210
70Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 5.9epss 89%
from disclosure to weapon0 days
Published on NVDFeb 13
1st PoCJul 18
exploitation probability
89%top 1% of all CVEs
observed exploitation
nono source reports it
12 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
1 product
Red Hat Enterprise Linux 5
no_fix_planned: Will not fix
Fixed
16 products (720 components)
Red Hat Enterprise Linux Client (v. 7) · Red Hat Enterprise Linux Client Optional (v. 7) · Red Hat Enterprise Linux ComputeNode (v. 7) · Red Hat Enterprise Linux ComputeNode Optional (v. 7) · Red Hat Enterprise Linux Server (v. 7) · and others 11
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/apublic PoCs found — 12
exploitdbwww.exploit-db.com/exploits/40136unverifiedexploitdbwww.exploit-db.com/exploits/40113unverifiedgithubgithub.com/justlce/CVE-2016-6210-Exploit★ 3githubgithub.com/serexp/poc-CVE20166210★ 2githubgithub.com/wabiyagi/CVE-2016-6210★ 1githubgithub.com/goomdan/CVE-2016-6210-exploit★ 1githubgithub.com/Alisha-chaudhary/ssh-enum★ 0githubgithub.com/samh4cks/CVE-2016-6210-OpenSSH-User-Enumeration★ 0githubgithub.com/nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2★ 0githubgithub.com/KiPhuong/cve-2016-6210★ 0cve_referencewww.exploit-db.com/exploits/40113/unverifiedcve_referencewww.exploit-db.com/exploits/40136/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://access.redhat.com/errata/RHSA-2017:2029https://access.redhat.com/errata/RHSA-2017:2563https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdfhttp://seclists.org/fulldisclosure/2016/Jul/51https://security.gentoo.org/glsa/201612-18https://security.netapp.com/advisory/ntap-20190206-0001/https://www.exploit-db.com/exploits/40113/https://www.exploit-db.com/exploits/40136/https://www.openssh.com/txt/release-7.3http://www.debian.org/security/2016/dsa-3626http://www.securityfocus.com/bid/91812http://www.securitytracker.com/id/1036319