NVD

Id
17144  
Name
CVE-2016-0778  
Description
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-02-08  
Published
2016-01-14  
Modified Date
2017-02-07  
Seq
2016-0778  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95272 17144 CVE-2016-0778 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734  View
95273 17144 CVE-2016-0778 APPLE-SA-2016-03-21-5  View
95274 17144 CVE-2016-0778 FEDORA-2016-2e89eba0c1  View
95275 17144 CVE-2016-0778 FEDORA-2016-4556904561  View
95276 17144 CVE-2016-0778 SUSE-SU-2016:0117  View
95277 17144 CVE-2016-0778 SUSE-SU-2016:0118  View
95278 17144 CVE-2016-0778 SUSE-SU-2016:0119  View
95279 17144 CVE-2016-0778 SUSE-SU-2016:0120  View
95280 17144 CVE-2016-0778 openSUSE-SU-2016:0127  View
95281 17144 CVE-2016-0778 openSUSE-SU-2016:0128  View
95282 17144 CVE-2016-0778 http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html  View
95283 17144 CVE-2016-0778 20160115 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778  View
95284 17144 CVE-2016-0778 DSA-3446  View
95285 17144 CVE-2016-0778 http://www.openssh.com/txt/release-7.1p2  View
95286 17144 CVE-2016-0778 [oss-security] 20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778  View
95287 17144 CVE-2016-0778 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
95288 17144 CVE-2016-0778 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
95289 17144 CVE-2016-0778 20160114 Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778  View
95290 17144 CVE-2016-0778 80698  View
95291 17144 CVE-2016-0778 1034671  View
95292 17144 CVE-2016-0778 USN-2869-1  View
95293 17144 CVE-2016-0778 https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/  View
95294 17144 CVE-2016-0778 https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/  View
95295 17144 CVE-2016-0778 https://bto.bluecoat.com/security-advisory/sa109  View
95296 17144 CVE-2016-0778 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375  View
95297 17144 CVE-2016-0778 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388  View
95298 17144 CVE-2016-0778 GLSA-201601-01  View
95299 17144 CVE-2016-0778 https://support.apple.com/HT206167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
344 JVNDB-2016-001117 OpenSSH のクライアントの roaming_common.c の roaming_read および roaming_write 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSH のクライアントの roaming_common.c の (1) roaming_read および (2) roaming_write 関数は、特定のプロキシおよび転送オプションが有効になっている場合、接続ファイル記述子を適切に保持しないため、サービス運用妨害 (ヒープベースのバッファオーバーフロー) 状態にされるになど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-0778 86982 CVE-2016-0778 17144 4.6 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001117.html 2016-01-14 2016-10-27 View