ISOMAN

CVE

CVE-2016-0778

The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.

Severity
HIGH
CVSS
8.1
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux7.9 x86_64 server dvdunknownsource
Oracle Linux7.9 x86_64 server bootunknownsource
Oracle Linux7.9 x86_64 server uek-bootunknownsource
Oracle Linux7.9 source source-dvd1unknownsource
Oracle Linux7.9 source source-dvd2unknownsource
Oracle Linux7.8 x86_64 server dvdunknownsource
Oracle Linux7.8 x86_64 server bootunknownsource
Oracle Linux7.8 x86_64 server uek-bootunknownsource
Oracle Linux7.8 source source-dvd1unknownsource
Oracle Linux7.8 source source-dvd2unknownsource
Oracle Linux7.7 x86_64 server dvdunknownsource
Oracle Linux7.7 x86_64 server bootunknownsource
Oracle Linux7.7 x86_64 server uek-bootunknownsource
Oracle Linux7.7 source source-dvd1unknownsource
Oracle Linux7.7 source source-dvd2unknownsource
Oracle Linux7.9 aarch64 server dvdunknownsource
Oracle Linux7.9 aarch64 server uek-bootunknownsource
Oracle Linux7.8 aarch64 server dvdunknownsource
Oracle Linux7.8 aarch64 server uek-bootunknownsource
Oracle Linux7.7 aarch64 server dvdunknownsource
Oracle Linux7.7 aarch64 server uek-bootunknownsource

References

  1. http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
  2. http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
  3. http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
  4. http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
  5. http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
  6. http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
  7. http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
  8. http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
  9. http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
  10. http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html
  11. http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
  12. http://seclists.org/fulldisclosure/2016/Jan/44
  13. http://www.debian.org/security/2016/dsa-3446
  14. http://www.openssh.com/txt/release-7.1p2
  15. http://www.openwall.com/lists/oss-security/2016/01/14/7
  16. http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
  17. http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
  18. http://www.securityfocus.com/archive/1/537295/100/0/threaded
  19. http://www.securityfocus.com/bid/80698
  20. http://www.securitytracker.com/id/1034671