ISOMAN

CVE

CVE-2016-10708

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html
  2. http://www.securityfocus.com/bid/102780
  3. https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737
  4. https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
  5. https://kc.mcafee.com/corporate/index?page=content&id=SB10284
  6. https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html
  7. https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
  8. https://security.netapp.com/advisory/ntap-20180423-0003/
  9. https://support.f5.com/csp/article/K32485746?utm_source=f5support&amp%3Butm_medium=RSS
  10. https://usn.ubuntu.com/3809-1/
  11. https://www.openssh.com/releasenotes.html
  12. http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html
  13. http://www.securityfocus.com/bid/102780
  14. https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737
  15. https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
  16. https://kc.mcafee.com/corporate/index?page=content&id=SB10284
  17. https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html
  18. https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
  19. https://security.netapp.com/advisory/ntap-20180423-0003/
  20. https://support.f5.com/csp/article/K32485746?utm_source=f5support&amp%3Butm_medium=RSS