K24324390 : OpenSSH vulnerability CVE-2016-10011

Security Advisory Description

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process. (CVE-2016-10011)

Impact

A locally authenticated attacker may be able to exploit this vulnerability and obtain sensitive key information.

Note: No such leak has been observed in practice for normal-sized keys, nor does a leak to the child processes directly expose key material to unprivileged users.