DeutschShown in its original language — a full translation is planned for a future version.
OpenSSH: Mehrere Schwachstellen
view advisory published 2016-01-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSH, Ubuntu Linux, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Workstation, Debian Linux, SUSE SUSE Linux Enterprise Server und SUSE SUSE Linux Enterprise Desktop ausnutzen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-1907US | medium5.3 | — | ||
The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted n… | ||||
| CVE-2016-0778US | high8.1 | — | ||
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled… | ||||
| CVE-2016-0777US | medium6.5 | Exploit | ||
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by r… | ||||
02
references
External citations — patches, advisories, analysis.
- IBM Security Advisory openssh_advisory7 vom 2016-01-29external
- Juniper Security Bulletin JSA10734 vom 2016-04-13external
- NetBSD 7.0.1 Releaseexternal
- OpenSSH 7.1p2 release vom 2016-01-14external
- Ubuntu Security Notice USN-2869-1 vom 2016-01-14external
- Ubuntu Security Notice USN-2966-1 vom 2016-05-10external
- BLUECOAT Security Advisory SA109 vom 2016-01-28external
- Sophos Advisory Article ID: 123533external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan