Lucene search

K
redhatcveRedhat.comRH:CVE-2016-6515
HistoryAug 08, 2016 - 9:19 a.m.

CVE-2016-6515

2016-08-0809:19:32
redhat.com
access.redhat.com
50

0.045 Low

EPSS

Percentile

92.5%

It was found that OpenSSH did not limit password lengths for password authentication. A remote unauthenticated attacker could use this flaw to temporarily trigger high CPU consumption in sshd by sending long passwords.