NVD

Id
17416  
Name
CVE-2016-10011  
Description
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2017-01-04  
Modified Date
2017-01-06  
Seq
2016-10011  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
96418 17416 CVE-2016-10011 [oss-security] 20161219 Announce: OpenSSH 7.4 released  View
96419 17416 CVE-2016-10011 94977  View
96420 17416 CVE-2016-10011 1037490  View
96421 17416 CVE-2016-10011 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637  View
96422 17416 CVE-2016-10011 https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9  View
96423 17416 CVE-2016-10011 https://www.openssh.com/txt/release-7.4  View

Related JVN