High WID-SEC-2023-1996 4 CVEs

OpenSSH: Mehrere Schwachstellen

Published Dec 19, 2016 · Updated Jan 12, 2026 · Revision 34 · de-DE

Vendor: amazon Vendor: Dell Vendor: EMC Vendor: FreeBSD Vendor: IBM Vendor: Juniper Networks Vendor: Moxa Vendor: NETAPP Vendor: Palo Alto Networks Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: AIX Product: Avamar Product: Data ONTAP Product: Enterprise Linux Product: FreeBSD OS Product: Junos Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: PAN-OS Product: Security Verify Access Product: Switch Product: VIOS Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, seine Privilegien zu erweitern oder einen Denial of Service Angriff durchzuführen.

Product

OpenSSH ist eine Open Source Implementierung des Secure Shell Protokolls.

Vulnerabilities 4

High 7.8

CVE-2016-10012

The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensur…

openssh openssh openssh Debian Ubuntu Alpine

Jan 5, 2017
High 7.3

CVE-2016-10009 Public exploit EPSS 37%

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execut…

openssh openssh openssh Debian Ubuntu Alpine

Jan 5, 2017
High 7.0

CVE-2016-10010 Public exploit

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which…

openssh openssh openssh Debian Ubuntu Alpine

Jan 5, 2017
Medium 6.2

CVE-2016-10011

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which mi…

openssh openssh openssh Debian Ubuntu Alpine

Jan 5, 2017

Revision history

2026-01-12 #34
Neue Updates von IBM aufgenommen
2026-01-08 #33
Neue Updates von moxa aufgenommen
2024-05-07 #32
Neue Updates von Dell aufgenommen
2023-08-23 #31
Neue Updates von Amazon aufgenommen
2023-08-08 #30
Neue Updates von Amazon aufgenommen
2021-04-15 #29
Neue Updates von Juniper aufgenommen
2020-05-13 #28
Neue Updates von Palo Alto Networks aufgenommen
2018-10-29 #27
New remediations available
2018-09-16 #26
New remediations available
2018-09-11 #24
Produkte ergänzt
2018-09-11 #25
New remediations available
2018-08-23 #23
Added references
2018-08-09 #20
New remediations available
2018-08-09 #21
Version nicht vorhanden
2018-08-09 #22
Version nicht vorhanden
2018-06-13 #19
New remediations available
2017-08-07 #18
Added references
2017-08-01 #17
New remediations available
2017-06-26 #16
New remediations available
2017-03-06 #14
New remediations available
2017-03-06 #15
Version nicht vorhanden
2017-03-05 #13
New remediations available
2017-02-22 #12
New remediations available
2017-02-20 #9
New remediations available
2017-02-20 #10
Version nicht vorhanden

References

OpenSSH 7.4 Release vom 2016-12-19
http://www.openssh.com/txt/release-7.4
SecurityTracker Alert ID 1037490 vom 2016-12-19
http://www.securitytracker.com/id/1037490
FreeBSD Security Advisory: FreeBSD-SA-17:01.openssh.asc
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:01.openssh.asc
SUSE Security Update SUSE-SU-2017:0264-1 vom 2017-01-24
https://www.suse.com/support/update/announcement/2017/suse-su-20170264-1.html
F5 Security Advisory K64292204 vom 2017-01-24
https://support.f5.com/csp/article/K64292204
F5 Security Advisory K31440025 vom 2017-01-24
https://support.f5.com/csp/article/K31440025
F5 Security Advisory K62201745 vom 2017-01-27
https://support.f5.com/csp/article/K62201745
IBM Security Advisory openssh_advisory10.asc
http://aix.software.ibm.com/aix/efixes/security/openssh_advisory10.asc
The FreeBSD Project Security Advisory: FreeBSD-SA-17:01.openssh
https://www.freebsd.org/security/advisories/FreeBSD-SA-17:01.openssh.asc
SUSE Security Update SUSE-SU-2017:0603-1 vom 2017-03-03
https://www.suse.com/support/update/announcement/2017/suse-su-20170603-1.html
SUSE Security Update SUSE-SU-2017:0607-1 vom 2017-03-06
https://www.suse.com/support/update/announcement/2017/suse-su-20170607-1.html
SUSE Security Update SUSE-SU-2017:0606-1 vom 2017-03-06
https://www.suse.com/support/update/announcement/2017/suse-su-20170606-1.html
SUSE Security Update SUSE-SU-2017:1661-1 vom 2017-06-24
https://www.suse.com/support/update/announcement/2017/suse-su-20171661-1.html
RedHat Security Advisory: RHSA-2017:2029
https://access.redhat.com/errata/RHSA-2017:2029
Ubuntu Security Notice USN-3538-1 vom 2018-01-22
http://www.ubuntu.com/usn/usn-3538-1/
McAfee Security Bulletin: SB10239
https://kc.mcafee.com/corporate/index?page=content&id=SB10239
SUSE Security Update SUSE-SU-2018:2275-1 vom 2018-08-10
https://www.suse.com/support/update/announcement/2018/suse-su-20182275-1.html
SUSE Security Update SUSE-SU-2018:2685-1 vom 2018-09-11
https://www.suse.com/support/update/announcement/2018/suse-su-20182685-1.html
SUSE Security Update SUSE-SU-2018:2719-1 vom 2018-09-15
https://www.suse.com/support/update/announcement/2018/suse-su-20182719-1.html
SUSE Security Update SUSE-SU-2018:3540-1 vom 2018-10-29
https://www.suse.com/support/update/announcement/2018/suse-su-20183540-1.html
Palo Alto Networks Security Advisory PAN-SA-2020-0005 vom 2020-05-13
https://security.paloaltonetworks.com/PAN-SA-2020-0005
Juniper Security Advisory JSA11169 vom 2021-04-16
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11169
Amazon Linux Security Advisory ALAS-2023-2176 vom 2023-08-09
https://alas.aws.amazon.com/AL2/ALAS-2023-2176.html
Amazon Linux Security Advisory ALAS-2023-1802 vom 2023-08-23
https://alas.aws.amazon.com/ALAS-2023-1802.html
Dell Security Advisory DSA-2024-198 vom 2024-05-08
https://www.dell.com/support/kbdoc/000224827/dsa-2024-=
Moxa Security Advisory MPSA-256261 vom 2026-01-09
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-256261-cve-2023-38408-openssh-vulnerability-in-ethernet-switches
IBM Security Bulletin 7256856 vom 2026-01-13
https://www.ibm.com/support/pages/node/7256856