CVE-2016-10708 sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, relate...
HighCVSS 7.5
EPSS 15.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openssh(Debian:12) | < 1:7.4p1-1 | 1:7.4p1-1 |
| debian/openssh(Debian:13) | < 1:7.4p1-1 | 1:7.4p1-1 |
| debian/openssh(Debian:14) | < 1:7.4p1-1 | 1:7.4p1-1 |
| OpenBSD openssh | < 7.4 | 7.4 |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| netapp cloud backup | All versions | No fix listed |
| netapp data ontap | All versions | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp oncommand unified manager | >= 9.4 | No fix listed |
| netapp service processor | All versions | No fix listed |
| netapp StorageGRID | All versions | No fix listed |
| netapp storagegrid webscale | All versions | No fix listed |
| netapp clustered data ontap | All versions | No fix listed |
| netapp vasa provider | All versions | No fix listed |
References
- Debian Security Tracker CVE-2016-10708 vendor-advisory
- blog.swiecki.net patch third-party-advisory
- 102780 third-party-advisory vdb-entry
- anongit.mindrot.org patch third-party-advisory
- cert-portal.siemens.com
- kc.mcafee.com
- [debian-lts-announce] 20180126 [SECURITY] [DLA 1257-1] openssh security update mailing-list third-party-advisory
- [debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update mailing-list third-party-advisory
- security.netapp.com third-party-advisory
- support.f5.com
- USN-3809-1 third-party-advisory vendor-advisory
- www.openssh.com release-notes vendor-advisory