NetSight
IP …
high7.5

CVE-2016-10708

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS mess…

Impact

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.

Affected products

VendorProductAffected versions
OpenbsdOpenssh
before 7.4
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04
NetappCloud Backup
All versions
NetappData Ontap
All versions
NetappData Ontap Edge
All versions
NetappOncommand Unified Manager
from 9.4
NetappService Processor
All versions
NetappStoragegrid
All versions
NetappStoragegrid Webscale
All versions
NetappClustered Data Ontap
All versions
NetappVasa Provider
All versions

Weakness classification

CWE-476

References