CVE-2016-0778

Опубликовано: 14 янв. 2016

Источник: nvd

CVSS3: 8.1

CVSS2: 4.6

EPSS Средний

Описание

The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.

Ссылки

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
Third Party Advisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
Mailing List
Release Notes
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Jan/44
Mailing List
Third Party Advisory
http://www.debian.org/security/2016/dsa-3446
Third Party Advisory
http://www.openssh.com/txt/release-7.1p2
Patch
Release Notes
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/01/14/7
Exploit
Mailing List
Technical Description
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
Third Party Advisory
http://www.securityfocus.com/archive/1/537295/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/80698
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034671
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:openbsd:openssh:5.4:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.4:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.5:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.6:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.6:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.7:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.7:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.8:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.8:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:5.9:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.0:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.0:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.1:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.2:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.2:p2:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.3:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.4:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.4:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.5:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.6:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.6:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.7:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.7:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.8:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.8:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:6.9:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:7.0:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:7.0:p1:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:7.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:7.1:p1:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия от 10.9.0 (включая) до 10.9.5 (включая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия от 10.10.0 (включая) до 10.10.5 (включая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия от 10.11.0 (включая) до 10.11.3 (включая)

Конфигурация 4

cpe:2.3:o:hp:virtual_customer_access_system:*:*:*:*:*:*:*:*

Версия до 15.07 (включая)

Конфигурация 5

cpe:2.3:a:sophos:unified_threat_management_software:9.353:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.20898

Средний

8.1 High

CVSS3

8.1 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-0778

CVSS3: 8.1

ubuntu

больше 10 лет назад

CVE-2016-0778

redhat

больше 10 лет назад

CVE-2016-0778

CVSS3: 8.1

debian

больше 10 лет назад

The (1) roaming_read and (2) roaming_write functions in roaming_common ...

GHSA-cqpr-rfm2-cchc

CVSS3: 8.1

github

около 4 лет назад

BDU:2019-01914

CVSS3: 8.1

fstec

больше 10 лет назад

Уязвимость функций roaming_read и roaming_write средства криптографической защиты OpenSSH, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 97%

0.20898

Средний

8.1 High

CVSS3

8.1 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119