CVE

Id
93335  
CVE No.
CVE-2016-6515  
Status
Candidate  
Description
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.  
Phase
Assigned (20160801)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793521 93335 CVE-2016-6515 EXPLOIT-DB:40888  View
793522 93335 CVE-2016-6515 URL:https://www.exploit-db.com/exploits/40888/  View
793523 93335 CVE-2016-6515 MLIST:[oss-security] 20160801 Announce: OpenSSH 7.3 released  View
793524 93335 CVE-2016-6515 URL:http://openwall.com/lists/oss-security/2016/08/01/2  View
793525 93335 CVE-2016-6515 MISC:http://packetstormsecurity.com/files/140070/OpenSSH-7.2-Denial-Of-Service.html  View
793526 93335 CVE-2016-6515 CONFIRM:https://github.com/openssh/openssh-portable/commit/fcd135c9df440bcd2d5870405ad3311743d78d97  View
793527 93335 CVE-2016-6515 FEDORA:FEDORA-2016-4a3debc3a6  View
793528 93335 CVE-2016-6515 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2L6RW34VFNXYNVVN2CN73YAGJ5VMTFU/  View
793529 93335 CVE-2016-6515 BID:92212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4652 JVNDB-2016-005425 Linux Kernel の include/net/tcp.h の tcp_check_send_head 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の include/net/tcp.h の tcp_check_send_head 関数は、データコピーの失敗後、特定の SACK 状態を適切に維持しないため、サービス運用妨害 (tcp_xmit_retransmit_queue の解放済みメモリの使用 (use-after-free) およびシステムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-6828 93335 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005425.html  View