← Back

CVE-2016-10708

nvd nist
Published: Jan 21, 2018Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.

Affected (14)

Show all products
Openbsd: Openssh · Debian: Debian Linux · Canonical: Ubuntu Linux · Netapp: Cloud Backup, Data Ontap, Data Ontap Edge, Oncommand Unified Manager, Service Processor, Storagegrid, Storagegrid Webscale, Vasa Provider
Openbsd
1 product
Openssh
Debian
1 product
Debian Linux
Canonical
1 product
Ubuntu Linux
Netapp
8 products
Cloud Backup
Data Ontap
Data Ontap Edge
Oncommand Unified Manager
Service Processor
Storagegrid
Storagegrid Webscale
Vasa Provider
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openssh
Before 7.4
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 7.0
Debian Linux
Version 8.0
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Configuration D
7 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Data Ontap
All versions
Data Ontap Edge
All versions
Oncommand Unified Manager
From 9.4
Service Processor
All versions
Storagegrid
All versions
Storagegrid Webscale
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vasa Provider
All versions
Running on/withPlatform Versions
Netapp
Clustered Data Ontap
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (22)

Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.