NVD

Id
17143  
Name
CVE-2016-0777  
Description
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-02-08  
Published
2016-01-14  
Modified Date
2017-02-07  
Seq
2016-0777  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95242 17143 CVE-2016-0777 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734  View
95243 17143 CVE-2016-0777 APPLE-SA-2016-03-21-5  View
95244 17143 CVE-2016-0777 FEDORA-2016-2e89eba0c1  View
95245 17143 CVE-2016-0777 FEDORA-2016-67c6ef0d4f  View
95246 17143 CVE-2016-0777 FEDORA-2016-c330264861  View
95247 17143 CVE-2016-0777 FEDORA-2016-4556904561  View
95248 17143 CVE-2016-0777 SUSE-SU-2016:0117  View
95249 17143 CVE-2016-0777 SUSE-SU-2016:0118  View
95250 17143 CVE-2016-0777 SUSE-SU-2016:0119  View
95251 17143 CVE-2016-0777 SUSE-SU-2016:0120  View
95252 17143 CVE-2016-0777 openSUSE-SU-2016:0127  View
95253 17143 CVE-2016-0777 openSUSE-SU-2016:0128  View
95254 17143 CVE-2016-0777 http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html  View
95255 17143 CVE-2016-0777 20160115 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778  View
95256 17143 CVE-2016-0777 DSA-3446  View
95257 17143 CVE-2016-0777 http://www.openssh.com/txt/release-7.1p2  View
95258 17143 CVE-2016-0777 [oss-security] 20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778  View
95259 17143 CVE-2016-0777 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
95260 17143 CVE-2016-0777 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
95261 17143 CVE-2016-0777 20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778  View
95262 17143 CVE-2016-0777 80695  View
95263 17143 CVE-2016-0777 1034671  View
95264 17143 CVE-2016-0777 USN-2869-1  View
95265 17143 CVE-2016-0777 https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/  View
95266 17143 CVE-2016-0777 https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/  View
95267 17143 CVE-2016-0777 https://bto.bluecoat.com/security-advisory/sa109  View
95268 17143 CVE-2016-0777 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375  View
95269 17143 CVE-2016-0777 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388  View
95270 17143 CVE-2016-0777 GLSA-201601-01  View
95271 17143 CVE-2016-0777 https://support.apple.com/HT206167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
343 JVNDB-2016-001116 OpenSSH のクライアントの roaming_common.c の resend_bytes 関数におけるプロセスメモリから重要な情報を取得される脆弱性 OpenSSH のクライアントの roaming_common.c の resend_bytes 関数には、プロセスメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-0777 86981 CVE-2016-0777 17143 4 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001116.html 2016-01-14 2016-10-27 View