K57304814: OpenSSH vulnerability CVE-2016-8858

🗓️ 21 Feb 2023 19:51:56Reported by f5Type

f5🔗 my.f5.com👁 116 Views

OpenSSH vulnerability CVE-2016-8858 allows remote attackers to cause denial of service by sending duplicate KEXINIT requests, consuming up to 128 MB per connection. Impact limited by configuration to approximately 1 GB of memory consumed

Reporter	Title	Published	Views	Family All 133
ALT Linux	Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2	21 Oct 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.3	20 Oct 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.3	20 Oct 201600:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Fabric OS firmware for Brocade 8Gb SAN Switch Module for BladeCenter is affected by vulnerabilities in OpenSSL and OpenSSH	16 Jun 201915:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM i (CVE-2016-8858)	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM PureApplication System	13 Mar 202023:00	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SSH affects IBM DataPower Gateways (CVE-2016-8858)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH and OpenSSL affect GPFS for Windows V3.5	25 Jun 202116:46	–	ibm
FreeBSD	FreeBSD -- OpenSSH Remote Denial of Service vulnerability	19 Oct 201600:00	–	freebsd
Tenable Nessus	AIX OpenSSH Advisory : openssh_advisory10.asc	5 May 202000:00	–	nessus

Vulners

Node

f5 linerateRange2.5.0–2.6.1

21 Feb 2023 19:51Current

8.4High risk

Vulners AI Score8.4

CVSS 37.5

CVSS 27.8

CVSS 3.17.5

EPSS0.31178

SSVC