NVD

Id
17417  
Name
CVE-2016-10012  
Description
The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2017-01-04  
Modified Date
2017-01-06  
Seq
2016-10012  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
96424 17417 CVE-2016-10012 [oss-security] 20161219 Announce: OpenSSH 7.4 released  View
96425 17417 CVE-2016-10012 94975  View
96426 17417 CVE-2016-10012 1037490  View
96427 17417 CVE-2016-10012 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637  View
96428 17417 CVE-2016-10012 https://github.com/openbsd/src/commit/3095060f479b86288e31c79ecbc5131a66bcd2f9  View
96429 17417 CVE-2016-10012 https://www.openssh.com/txt/release-7.4  View

Related JVN