CVE-2016-0778
26Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.1epss 22%
probabilidad de explotación
22%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/aReferencias
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.htmlhttp://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.htmlhttps://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/