Lucene search

PRIOn knowledge basePRION:CVE-2016-0777

HistoryJan 14, 2016 - 10:59 p.m.

Buffer overflow

2016-01-1422:59:00

PRIOn knowledge base

www.prio-n.com

147

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.0%

JSON

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.

CPENameOperatorVersion
mac_os_xle10.11.3
remote_device_access_virtual_customer_access_systemle15.07
openssheq5.4
openssheq5.5
openssheq6.6
openssheq6.7
openssheq5.3
openssheq5.0 p1
openssheq5.4 p1
openssheq6.2 p1

Name	Operator	Version
mac_os_x	le	10.11.3
remote_device_access_virtual_customer_access_system	le	15.07
openssh	eq	5.4
openssh	eq	5.5
openssh	eq	6.6
openssh	eq	6.7
openssh	eq	5.3
openssh	eq	5.0 p1
openssh	eq	5.4 p1
openssh	eq	6.2 p1

Rows per page:

1-10 of 511

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10734

lists.apple.com/archives/security-announce/2016/Mar/msg00004.html

lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html

lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html

lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html

lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html

lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html

lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html

packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html

seclists.org/fulldisclosure/2016/Jan/44

www.debian.org/security/2016/dsa-3446

www.openssh.com/txt/release-7.1p2

www.openwall.com/lists/oss-security/2016/01/14/7

www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

www.securityfocus.com/archive/1/537295/100/0/threaded

www.securityfocus.com/bid/80695

www.securitytracker.com/id/1034671

www.ubuntu.com/usn/USN-2869-1

blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/

blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/

bto.bluecoat.com/security-advisory/sa109

cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html

lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html

lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html

lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html

security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc

security.gentoo.org/glsa/201601-01

support.apple.com/HT206167