VulnerabilityModified

CVE-2016-0777

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a…

MEDIUM 6.5EPSS 63.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 63.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 63.47% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: sophos/unified threat management software · oracle/linux · oracle/solaris · openbsd/openssh · hp/remote device access virtual customer access system · apple/mac os x
Source: secalert@redhat.com

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734Third Party Advisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.htmlMailing List, Third Party Advisory
http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2016/Jan/44Mailing List, Third Party Advisory
http://www.debian.org/security/2016/dsa-3446Third Party Advisory
http://www.openssh.com/txt/release-7.1p2Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/01/14/7Mailing List, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/537295/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/80695Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034671Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2869-1Third Party Advisory
https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/Third Party Advisory
https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa109Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.