66 matches found
FreeBSD-SA-16:07.openssh
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:07.openssh Security Advisory The FreeBSD Project Topic: OpenSSH client information leak Category: contrib Module: openssh Announced: 2016-01-14 Credits:...
OpenSSH Client contains a client information leak vulnerability and buffer overflow
Overview OpenSSH client code versions 5.4 through 7.1p1 contains a client information leak vulnerability that could allow an OpenSSH client to leak information not limited to but including private keys, as well as a buffer overflow in certain non-default configurations. Description CWE-200:...
CVE-2016-0777
CVE-2016-0777 pertains to an information leak and buffer overflow in OpenSSH client roaming (roaming_bytes reading memory) affecting OpenSSH 5.x, 6.x, and 7.x prior to 7.1p2. Exploitation would allow a remote server to obtain memory contents (e.g., private keys) via a roaming request. Connected d...
DLA-387-1 openssh - security update
Bulletin has no description...
Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.1
6.7p1-alt1.M70P.1 built Jan. 14, 2016 Gleb Fotengauer-Malinovskiy in task 155926 Jan. 14, 2016 Gleb Fotengauer-Malinovskiy - openssh-clients: disabled UseRoaming fixes CVE-2016-0777 and CVE-2016-0778. - Backported to p7 branch...