CVE-2016-8858 in OpenSSH
Zusammenfassung (Englisch)
** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
19.10.2016
Veröffentlichung
09.12.2016
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 92997 | OpenSSH Key Exchange Initialization kex_input_kexinit Denial of Service | 399 | Nicht definiert | Offizieller Fix | CVE-2016-8858 |