CVEvulnerability

CVE-2016-0778

8.1 HIGH Published 2016-01-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:N/AC:H/Au:S/C:P/I:P/A:P
Weaknesses
CWE-119

Description

The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.

Affected configurations

• oracle linux 7 • oracle solaris 11.3 • openbsd openssh 5.4 • openbsd openssh 5.5 • openbsd openssh 5.6 • openbsd openssh 5.7 • openbsd openssh 5.8 • openbsd openssh 5.9 • openbsd openssh 6.0 • openbsd openssh 6.1 • openbsd openssh 6.2 • openbsd openssh 6.3 • openbsd openssh 6.4 • openbsd openssh 6.5 • openbsd openssh 6.6 • openbsd openssh 6.7 • openbsd openssh 6.8 • openbsd openssh 6.9 • openbsd openssh 7.0 • openbsd openssh 7.1 • apple mac os x (>= 10.9.0 <= 10.9.5) • apple mac os x (>= 10.10.0 <= 10.10.5) • apple mac os x (>= 10.11.0 <= 10.11.3) • hp virtual customer access system (<= 15.07) • sophos unified threat management software 9.353

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References