CVE-2016-0777

medium · 6.5

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.

6.5

CVSS

63.5%

EPSS (exploit prob.)

99th

EPSS percentile

2016-01-14

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
sophos	unified_threat_management_software	9.318
sophos	unified_threat_management_software	9.353
sophos	unified_threat_management	110
sophos	unified_threat_management	120
sophos	unified_threat_management	220
sophos	unified_threat_management	320
sophos	unified_threat_management	425
sophos	unified_threat_management	525
sophos	unified_threat_management	625
oracle	linux	7
oracle	solaris	11.3
openbsd	openssh	5.0
openbsd	openssh	5.0
openbsd	openssh	5.1
openbsd	openssh	5.1
openbsd	openssh	5.2
openbsd	openssh	5.2
openbsd	openssh	5.3
openbsd	openssh	5.3
openbsd	openssh	5.4
openbsd	openssh	5.4
openbsd	openssh	5.5
openbsd	openssh	5.5
openbsd	openssh	5.6
openbsd	openssh	5.6
openbsd	openssh	5.7
openbsd	openssh	5.7
openbsd	openssh	5.8
openbsd	openssh	5.8
openbsd	openssh	5.9
openbsd	openssh	5.9
openbsd	openssh	6.0
openbsd	openssh	6.0
openbsd	openssh	6.1
openbsd	openssh	6.1
openbsd	openssh	6.2
openbsd	openssh	6.2
openbsd	openssh	6.2
openbsd	openssh	6.3
openbsd	openssh	6.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-0777