Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2016-8858 |
CWE-ID | CWE-401 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software Subscribe |
OpenSSH Server applications / Remote management servers, RDP, SSH |
Vendor | OpenSSH |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU1033
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2016-8858
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a remote unauthenticated attacker to cause DoS conditions on the target system.
The weakness is due to flaw in kex_input_kexinit() function. By sending a specially crafted data during the key exchange process, attackers can cause memory exhaustion. Consuming up to 128 MB per connection may lead to denial of service.
Successful exploitation of the vulnerability results in denial of service of the vulnerable system.
Install the latest OpenSSH version 7.4.
OpenSSH: 7.0p1 - 7.3p1
External linkshttp://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup
http://www.openssh.com/txt/release-7.4
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.