CVE-2016-10708
Fixed in a distro release EPSS 16%CVSS 7.5
sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
Products: openbsd openssh, debian_linux, canonical ubuntu_linux, netapp cloud_backup, netapp data_ontap, netapp data_ontap_edge, netapp oncommand_unified_manager, netapp service_processor, netapp storagegrid, netapp storagegrid_webscale, netapp clustered_data_ontap, netapp vasa_provider
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssh | 1:7.4p1-1 |
| Debian 13 | openssh | 1:7.4p1-1 |
| Debian 14 | openssh | 1:7.4p1-1 |
| Debian 7 | openssh | 1:6.0p1-4+deb7u7 |
| Debian 8 | openssh | 1:6.7p1-5+deb8u6 |
| Red Hat Enterprise Linux 7 | openssh | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-askpass | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-cavs | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-clients | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-debuginfo | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-keycat | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-ldap | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-server | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | openssh-server-sysvinit | 0:7.4p1-11.el7 |
| Red Hat Enterprise Linux 7 | pam_ssh_agent_auth | 0:0.10.3-1.11.el7 |
| SUSE Enterprise Storage 4 | openssh | 7.2p2-74.25.1 |
| SUSE Enterprise Storage 4 | openssh-askpass-gnome | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | openssh | 7.2p2-74.19.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | openssh-askpass-gnome | 7.2p2-74.19.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | openssh | 6.2p2-0.41.5.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | openssh-askpass-gnome | 6.2p2-0.41.5.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | openssh | 6.2p2-0.41.5.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | openssh-askpass-gnome | 6.2p2-0.41.5.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssh | 6.2p2-0.41.5.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssh-askpass-gnome | 6.2p2-0.41.5.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssh | 6.6p1-36.3.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssh-askpass-gnome | 6.6p1-36.3.1 |
| SUSE Linux Enterprise Server 11-SECURITY | openssh-openssl1 | 6.6p1-19.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | openssh | 6.6p1-54.15.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | openssh-askpass-gnome | 6.6p1-54.15.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openssh | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | openssh-askpass-gnome | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openssh | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | openssh-askpass-gnome | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Server 12 SP3 | openssh | 7.2p2-74.19.1 |
| SUSE Linux Enterprise Server 12 SP3 | openssh-askpass-gnome | 7.2p2-74.19.1 |
| SUSE Linux Enterprise Server 12-LTSS | openssh | 6.6p1-54.15.2 |
| SUSE Linux Enterprise Server 12-LTSS | openssh-askpass-gnome | 6.6p1-54.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh | 6.6p1-36.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssh-askpass-gnome | 6.6p1-36.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssh | 6.6p1-54.15.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssh-askpass-gnome | 6.6p1-54.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openssh | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | openssh-askpass-gnome | 7.2p2-74.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openssh | 7.2p2-74.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openssh-askpass-gnome | 7.2p2-74.19.1 |
| SUSE OpenStack Cloud 7 | openssh | 7.2p2-74.25.1 |
| SUSE OpenStack Cloud 7 | openssh-askpass-gnome | 7.2p2-74.25.1 |
| Ubuntu 14.04 LTS | openssh | 1:6.6p1-2ubuntu2.11 |
| Ubuntu 16.04 LTS | openssh | 1:7.2p2-4ubuntu2.6 |
| Ubuntu 18.04 LTS | openssh | 1:7.6p1-4ubuntu0.1 |