The vulnerability of the auth_password function in the sshd service of the OpenSSH security tool allows a hacker to induce a service failure.

🗓️ 25 Jan 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Open Secure Shell daemon auth password vulnerability due to missing length checks; crafted input can crash the service.

Reporter	Title	Published	Views	Family All 179
IBM Security Bulletins	Security Bulletin: IBM Security Network Protection is affected by vulnerabilities in OpenSSH (CVE-2016-6210 CVE-2016-6515 CVE-2016-10009 CVE-2016-10011)	16 Jun 201822:03	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in openssh affect IBM Flex System Manager (FSM)	18 Jun 201801:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affects Power Hardware Management Console	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been fixed in products bundled with IBM Security Directory Suite 8.0.1	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager Appliance is affected by OpenSSH vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by OpenSSH vulnerabilities	13 Aug 201919:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager Appliance is affected by OpenSSH vulnerabilities	16 Jun 201822:05	–	ibm

Vulners

Node

openbsd opensshRange≤7.2

moxa moxa_edr-810Match4.1

openbsd opensshRange<6.7p1-alt1.m70c.1

Source	Link
openwall	www.openwall.com/lists/oss-security/2016/08/01/2
packetstormsecurity	www.packetstormsecurity.com/files/140070/OpenSSH-7.2-Denial-Of-Service.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
securityfocus	www.securityfocus.com/bid/92212
securitytracker	www.securitytracker.com/id/1036487
access	www.access.redhat.com/errata/RHSA-2017:2029
github	www.github.com/openssh/openssh-portable/commit/fcd135c9df440bcd2d5870405ad3311743d78d97
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/X2L6RW34VFNXYNVVN2CN73YAGJ5VMTFU/
security	www.security.freebsd.org/advisories/FreeBSD-SA-17:06.openssh.asc
security	www.security.netapp.com/advisory/ntap-20171130-0003/

28 Nov 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 37.5

CVSS 27.8

EPSS0.77091