Skip to content
OpenAdvisories
High USN-2869-1 2 CVEs

openssh vulnerabilities

Published Jan 14, 2016 · Updated Jun 1, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the OpenSSH client experimental support for resuming
connections contained multiple security issues. A malicious server could
use this issue to leak client memory to the server, including private
client user keys.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS openssh 1:6.6p1-2ubuntu2.4

Vulnerabilities 2

  • High 8.1
    CVE-2016-0778 EPSS 21%

    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x bef…

    openssh openssh Debian Ubuntu
  • Medium 6.5
    CVE-2016-0777 Public exploit EPSS 63%

    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote ser…

    openssh openssh Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-0777
  • report
    https://ubuntu.com/security/CVE-2016-0778