Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-6210
HistoryJul 18, 2016 - 12:00 a.m.

CVE-2016-6210

2016-07-1800:00:00
ubuntu.com
ubuntu.com
23

0.107 Low

EPSS

Percentile

95.1%

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user
password hashing, uses BLOWFISH hashing on a static password when the
username does not exist, which allows remote attackers to enumerate users
by leveraging the timing difference between responses when a large password
is provided.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchopenssh< 1:5.9p1-5ubuntu1.10UNKNOWN
ubuntu14.04noarchopenssh< 1:6.6p1-2ubuntu2.8UNKNOWN
ubuntu16.04noarchopenssh< 1:7.2p2-4ubuntu2.1UNKNOWN