CVE-2016-0777
Fixed in a distro release EPSS 63%CVSS 6.5
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
Products: sophos unified_threat_management_software, oracle linux, oracle solaris, openbsd openssh, hp remote_device_access_virtual_customer_access_system, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssh | 1:7.1p2-1 |
| Debian 13 | openssh | 1:7.1p2-1 |
| Debian 14 | openssh | 1:7.1p2-1 |
| Debian 6.0 | openssh | 1:5.5p1-6+squeeze8 |
| Debian 7 | openssh | 1:6.0p1-4+deb7u3 |
| Debian 8 | openssh | 1:6.7p1-5+deb8u1 |
| Red Hat Enterprise Linux 7 | openssh | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-askpass | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-clients | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-debuginfo | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-keycat | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-ldap | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-server | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | openssh-server-sysvinit | 0:6.6.1p1-23.el7_2 |
| Red Hat Enterprise Linux 7 | pam_ssh_agent_auth | 0:0.9.3-9.23.el7_2 |
| SUSE Linux Enterprise Desktop 11 SP3 | openssh | 6.2p2-0.24.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | openssh-askpass-gnome | 6.2p2-0.24.3 |
| SUSE Linux Enterprise Desktop 11 SP4 | openssh | 6.6p1-16.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | openssh-askpass-gnome | 6.6p1-16.4 |
| SUSE Linux Enterprise Desktop 12 | openssh | 6.6p1-33.1 |
| SUSE Linux Enterprise Desktop 12 | openssh-askpass-gnome | 6.6p1-33.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | openssh | 6.6p1-33.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | openssh-askpass-gnome | 6.6p1-33.1 |
| SUSE Linux Enterprise Server 11 SP3 | openssh | 6.2p2-0.24.1 |
| SUSE Linux Enterprise Server 11 SP3 | openssh-askpass-gnome | 6.2p2-0.24.3 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssh | 6.2p2-0.24.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssh-askpass-gnome | 6.2p2-0.24.3 |
| SUSE Linux Enterprise Server 11 SP4 | openssh | 6.6p1-16.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssh-askpass-gnome | 6.6p1-16.4 |
| SUSE Linux Enterprise Server 11-SECURITY | openssh-openssl1 | 6.6p1-10.1 |
| SUSE Linux Enterprise Server 12 | openssh | 6.6p1-33.1 |
| SUSE Linux Enterprise Server 12 | openssh-askpass-gnome | 6.6p1-33.1 |
| SUSE Linux Enterprise Server 12 SP1 | openssh | 6.6p1-33.1 |
| SUSE Linux Enterprise Server 12 SP1 | openssh-askpass-gnome | 6.6p1-33.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | openssh | 6.2p2-0.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | openssh-askpass-gnome | 6.2p2-0.24.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh | 6.6p1-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh-askpass-gnome | 6.6p1-16.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openssh | 6.6p1-33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openssh-askpass-gnome | 6.6p1-33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssh | 6.6p1-33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssh-askpass-gnome | 6.6p1-33.1 |
| Ubuntu 14.04 LTS | openssh | 1:6.6p1-2ubuntu2.4 |
| openSUSE Tumbleweed | openssh | 7.2p2-3.1 |