CVE-2016-8858 in OpenSSH
Summary
** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/19/2016
Disclosure
12/09/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 92997 | OpenSSH Key Exchange Initialization kex_input_kexinit resource management | 399 | Not defined | Official fix | CVE-2016-8858 |