CVE-2016-0787 The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH s...
MediumCVSS 5.9
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libssh2(Debian:12) | < 1.5.0-2.1 | 1.5.0-2.1 |
| debian/libssh2(Debian:13) | < 1.5.0-2.1 | 1.5.0-2.1 |
| debian/libssh2(Debian:14) | < 1.5.0-2.1 | 1.5.0-2.1 |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| libssh2 | <= 1.6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| alpine/libssh2(Alpine:v3.4) | < 1.7.0-r0 | 1.7.0-r0 |
References
- Debian Security Tracker CVE-2016-0787 vendor-advisory
- FEDORA-2016-215a2219b1 vendor-advisory
- FEDORA-2016-7942ee2cc5 vendor-advisory
- openSUSE-SU-2016:0639 vendor-advisory
- DSA-3487 vendor-advisory
- www.oracle.com
- 82514 vdb-entry
- bto.bluecoat.com
- kc.mcafee.com
- puppet.com
- GLSA-201606-12 third-party-advisory vendor-advisory
- www.libssh2.org patch
- www.libssh2.org vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking