CVE-2016-0777

原文の説明

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.

影響を受けるソフトウェア

• OpenSSH = 6.8= 6.3= 5.9= 5.8= 5.7= 7.0 完全一致

詳細

公開日

2016-01-14

最終更新

2026-06-17

CVSS ベクター

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-200

参考資料

• cve.org/CVE-2016-0777
• nvd.nist.gov/vuln/detail/CVE-2016-0777
• kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
• lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
• lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html
• lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html