DeutschShown in its original language — a full translation is planned for a future version.
OpenSSH: Mehrere Schwachstellen
view advisory published 2016-12-19
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, seine Privilegien zu erweitern oder einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-10012US | high7.8 | — | ||
The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which mig… | ||||
| CVE-2016-10011US | medium5.5 | — | ||
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key informa… | ||||
| CVE-2016-10010US | high7.0 | Exploit | ||
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified v… | ||||
| CVE-2016-10009US | high7.3 | Exploit | ||
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over… | ||||
02
references
External citations — patches, advisories, analysis.
- IBM Security Advisory openssh_advisory10.ascexternal
- OpenSSH 7.4 Release vom 2016-12-19external
- SecurityTracker Alert ID 1037490 vom 2016-12-19external
- Ubuntu Security Notice USN-3538-1 vom 2018-01-22external
- RedHat Security Advisory: RHSA-2017:2029external
- Amazon Linux Security Advisory ALAS-2023-2176 vom 2023-08-09external
- Amazon Linux Security Advisory ALAS-2023-1802 vom 2023-08-23external
- Juniper Security Advisory JSA11169 vom 2021-04-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan