csaf_suse - suse-su-2017:0264-1

Vulnerability from csaf_suse

Published

2017-01-23 12:26

Modified

2017-01-23 12:26

Summary

Security update for openssh

Notes

Title of the patch

Security update for openssh

Description of the patch

This update for openssh fixes several issues. These security issues were fixed: - CVE-2016-8858: The kex_input_kexinit function in kex.c allowed remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests (bsc#1005480). - CVE-2016-10012: The shared memory manager (associated with pre-authentication compression) did not ensure that a bounds check is enforced by all compilers, which might allowed local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures (bsc#1016370). - CVE-2016-10009: Untrusted search path vulnerability in ssh-agent.c allowed remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket (bsc#1016366). - CVE-2016-10010: When forwarding unix domain sockets with privilege separation disabled, the resulting sockets have be created as 'root' instead of the authenticated user. Forwarding unix domain sockets without privilege separation enabled is now rejected. - CVE-2016-10011: authfile.c in sshd did not properly consider the effects of realloc on buffer contents, which might allowed local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process (bsc#1016369). These non-security issues were fixed: - Adjusted suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221) - Properly verify CIDR masks in configuration (bsc#1005893)

Patchnames

SUSE-SLE-DESKTOP-12-SP2-2017-138,SUSE-SLE-RPI-12-SP2-2017-138,SUSE-SLE-SERVER-12-SP2-2017-138

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for openssh",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThis update for openssh fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2016-8858: The kex_input_kexinit function in kex.c allowed remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests (bsc#1005480).\n- CVE-2016-10012: The shared memory manager (associated with pre-authentication compression) did not ensure that a bounds check is enforced by all compilers, which might allowed local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures (bsc#1016370).\n- CVE-2016-10009: Untrusted search path vulnerability in ssh-agent.c allowed remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket (bsc#1016366).\n- CVE-2016-10010: When forwarding unix domain sockets with privilege separation disabled, the resulting sockets have be created as 'root' instead of the authenticated user. Forwarding unix domain sockets without privilege separation enabled is now rejected.\n- CVE-2016-10011: authfile.c in sshd did not properly consider the effects of realloc on buffer contents, which might allowed local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process (bsc#1016369).\n\nThese non-security issues were fixed:\n\n- Adjusted suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221)\n- Properly verify CIDR masks in configuration (bsc#1005893)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-SP2-2017-138,SUSE-SLE-RPI-12-SP2-2017-138,SUSE-SLE-SERVER-12-SP2-2017-138",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0264-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2017:0264-1",
            url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170264-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2017:0264-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2017-January/002592.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1005480",
            url: "https://bugzilla.suse.com/1005480",
         },
         {
            category: "self",
            summary: "SUSE Bug 1005893",
            url: "https://bugzilla.suse.com/1005893",
         },
         {
            category: "self",
            summary: "SUSE Bug 1006221",
            url: "https://bugzilla.suse.com/1006221",
         },
         {
            category: "self",
            summary: "SUSE Bug 1016366",
            url: "https://bugzilla.suse.com/1016366",
         },
         {
            category: "self",
            summary: "SUSE Bug 1016368",
            url: "https://bugzilla.suse.com/1016368",
         },
         {
            category: "self",
            summary: "SUSE Bug 1016369",
            url: "https://bugzilla.suse.com/1016369",
         },
         {
            category: "self",
            summary: "SUSE Bug 1016370",
            url: "https://bugzilla.suse.com/1016370",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10009 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10009/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10010 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10010/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10011 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10011/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-10012 page",
            url: "https://www.suse.com/security/cve/CVE-2016-10012/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-8858 page",
            url: "https://www.suse.com/security/cve/CVE-2016-8858/",
         },
      ],
      title: "Security update for openssh",
      tracking: {
         current_release_date: "2017-01-23T12:26:09Z",
         generator: {
            date: "2017-01-23T12:26:09Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2017:0264-1",
         initial_release_date: "2017-01-23T12:26:09Z",
         revision_history: [
            {
               date: "2017-01-23T12:26:09Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssh-7.2p2-66.1.aarch64",
                        product: {
                           name: "openssh-7.2p2-66.1.aarch64",
                           product_id: "openssh-7.2p2-66.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-askpass-gnome-7.2p2-66.3.aarch64",
                        product: {
                           name: "openssh-askpass-gnome-7.2p2-66.3.aarch64",
                           product_id: "openssh-askpass-gnome-7.2p2-66.3.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-fips-7.2p2-66.1.aarch64",
                        product: {
                           name: "openssh-fips-7.2p2-66.1.aarch64",
                           product_id: "openssh-fips-7.2p2-66.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-helpers-7.2p2-66.1.aarch64",
                        product: {
                           name: "openssh-helpers-7.2p2-66.1.aarch64",
                           product_id: "openssh-helpers-7.2p2-66.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssh-7.2p2-66.1.ppc64le",
                        product: {
                           name: "openssh-7.2p2-66.1.ppc64le",
                           product_id: "openssh-7.2p2-66.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                        product: {
                           name: "openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                           product_id: "openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-fips-7.2p2-66.1.ppc64le",
                        product: {
                           name: "openssh-fips-7.2p2-66.1.ppc64le",
                           product_id: "openssh-fips-7.2p2-66.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-helpers-7.2p2-66.1.ppc64le",
                        product: {
                           name: "openssh-helpers-7.2p2-66.1.ppc64le",
                           product_id: "openssh-helpers-7.2p2-66.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssh-7.2p2-66.1.s390x",
                        product: {
                           name: "openssh-7.2p2-66.1.s390x",
                           product_id: "openssh-7.2p2-66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-askpass-gnome-7.2p2-66.3.s390x",
                        product: {
                           name: "openssh-askpass-gnome-7.2p2-66.3.s390x",
                           product_id: "openssh-askpass-gnome-7.2p2-66.3.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-fips-7.2p2-66.1.s390x",
                        product: {
                           name: "openssh-fips-7.2p2-66.1.s390x",
                           product_id: "openssh-fips-7.2p2-66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-helpers-7.2p2-66.1.s390x",
                        product: {
                           name: "openssh-helpers-7.2p2-66.1.s390x",
                           product_id: "openssh-helpers-7.2p2-66.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssh-7.2p2-66.1.x86_64",
                        product: {
                           name: "openssh-7.2p2-66.1.x86_64",
                           product_id: "openssh-7.2p2-66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-askpass-gnome-7.2p2-66.3.x86_64",
                        product: {
                           name: "openssh-askpass-gnome-7.2p2-66.3.x86_64",
                           product_id: "openssh-askpass-gnome-7.2p2-66.3.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-helpers-7.2p2-66.1.x86_64",
                        product: {
                           name: "openssh-helpers-7.2p2-66.1.x86_64",
                           product_id: "openssh-helpers-7.2p2-66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssh-fips-7.2p2-66.1.x86_64",
                        product: {
                           name: "openssh-fips-7.2p2-66.1.x86_64",
                           product_id: "openssh-fips-7.2p2-66.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2",
                           product_id: "SUSE Linux Enterprise Server 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-fips-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
            },
            product_reference: "openssh-7.2p2-66.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
            },
            product_reference: "openssh-7.2p2-66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-fips-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
            },
            product_reference: "openssh-fips-7.2p2-66.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
            },
            product_reference: "openssh-fips-7.2p2-66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-fips-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
            },
            product_reference: "openssh-7.2p2-66.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
            },
            product_reference: "openssh-7.2p2-66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-askpass-gnome-7.2p2-66.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
            },
            product_reference: "openssh-askpass-gnome-7.2p2-66.3.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-fips-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
            },
            product_reference: "openssh-fips-7.2p2-66.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
            },
            product_reference: "openssh-fips-7.2p2-66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-fips-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-fips-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssh-helpers-7.2p2-66.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            },
            product_reference: "openssh-helpers-7.2p2-66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-10009",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10009",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10009",
               url: "https://www.suse.com/security/cve/CVE-2016-10009",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016336 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1016336",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016366 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1016366",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016370 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1016370",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026634 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1026634",
            },
            {
               category: "external",
               summary: "SUSE Bug 1138392 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1138392",
            },
            {
               category: "external",
               summary: "SUSE Bug 1213504 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1213504",
            },
            {
               category: "external",
               summary: "SUSE Bug 1217035 for CVE-2016-10009",
               url: "https://bugzilla.suse.com/1217035",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-01-23T12:26:09Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-10009",
      },
      {
         cve: "CVE-2016-10010",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10010",
            },
         ],
         notes: [
            {
               category: "general",
               text: "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10010",
               url: "https://www.suse.com/security/cve/CVE-2016-10010",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016336 for CVE-2016-10010",
               url: "https://bugzilla.suse.com/1016336",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016368 for CVE-2016-10010",
               url: "https://bugzilla.suse.com/1016368",
            },
            {
               category: "external",
               summary: "SUSE Bug 1021751 for CVE-2016-10010",
               url: "https://bugzilla.suse.com/1021751",
            },
            {
               category: "external",
               summary: "SUSE Bug 1196721 for CVE-2016-10010",
               url: "https://bugzilla.suse.com/1196721",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-01-23T12:26:09Z",
               details: "important",
            },
         ],
         title: "CVE-2016-10010",
      },
      {
         cve: "CVE-2016-10011",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10011",
            },
         ],
         notes: [
            {
               category: "general",
               text: "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10011",
               url: "https://www.suse.com/security/cve/CVE-2016-10011",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016336 for CVE-2016-10011",
               url: "https://bugzilla.suse.com/1016336",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016369 for CVE-2016-10011",
               url: "https://bugzilla.suse.com/1016369",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016370 for CVE-2016-10011",
               url: "https://bugzilla.suse.com/1016370",
            },
            {
               category: "external",
               summary: "SUSE Bug 1017870 for CVE-2016-10011",
               url: "https://bugzilla.suse.com/1017870",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026634 for CVE-2016-10011",
               url: "https://bugzilla.suse.com/1026634",
            },
            {
               category: "external",
               summary: "SUSE Bug 1029445 for CVE-2016-10011",
               url: "https://bugzilla.suse.com/1029445",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-01-23T12:26:09Z",
               details: "low",
            },
         ],
         title: "CVE-2016-10011",
      },
      {
         cve: "CVE-2016-10012",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-10012",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-10012",
               url: "https://www.suse.com/security/cve/CVE-2016-10012",
            },
            {
               category: "external",
               summary: "SUSE Bug 1006166 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1006166",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016336 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1016336",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016369 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1016369",
            },
            {
               category: "external",
               summary: "SUSE Bug 1016370 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1016370",
            },
            {
               category: "external",
               summary: "SUSE Bug 1017870 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1017870",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026634 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1026634",
            },
            {
               category: "external",
               summary: "SUSE Bug 1035742 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1035742",
            },
            {
               category: "external",
               summary: "SUSE Bug 1073044 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1073044",
            },
            {
               category: "external",
               summary: "SUSE Bug 1092582 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1092582",
            },
            {
               category: "external",
               summary: "SUSE Bug 1138392 for CVE-2016-10012",
               url: "https://bugzilla.suse.com/1138392",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-01-23T12:26:09Z",
               details: "low",
            },
         ],
         title: "CVE-2016-10012",
      },
      {
         cve: "CVE-2016-8858",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-8858",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests.  NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-8858",
               url: "https://www.suse.com/security/cve/CVE-2016-8858",
            },
            {
               category: "external",
               summary: "SUSE Bug 1005480 for CVE-2016-8858",
               url: "https://bugzilla.suse.com/1005480",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-66.3.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-66.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-01-23T12:26:09Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-8858",
      },
   ],
}

cve-2016-10010

Vulnerability from cvelistv5

Published

2017-01-05 00:00

Modified

2024-08-06 03:07

Severity ?

Summary

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/94972	vdb-entry
	https://security.netapp.com/advisory/ntap-20171130-0002/
	http://www.openwall.com/lists/oss-security/2016/12/19/2	mailing-list
	http://www.securitytracker.com/id/1037490	vdb-entry
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
	https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc	vendor-advisory
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
	https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce
	https://www.exploit-db.com/exploits/40962/	exploit
	https://bugs.chromium.org/p/project-zero/issues/detail?id=1010
	http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html
	https://www.openssh.com/txt/release-7.4
	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:07:32.015Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "94972",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94972",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
               },
               {
                  name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
               },
               {
                  name: "1037490",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037490",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
               },
               {
                  name: "FreeBSD-SA-17:01",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce",
               },
               {
                  name: "40962",
                  tags: [
                     "exploit",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40962/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=1010",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.openssh.com/txt/release-7.4",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-12-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-13T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "94972",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/94972",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
            },
            {
               name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
            },
            {
               name: "1037490",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securitytracker.com/id/1037490",
            },
            {
               url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
            },
            {
               name: "FreeBSD-SA-17:01",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc",
            },
            {
               url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
            },
            {
               url: "https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce",
            },
            {
               name: "40962",
               tags: [
                  "exploit",
               ],
               url: "https://www.exploit-db.com/exploits/40962/",
            },
            {
               url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=1010",
            },
            {
               url: "http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html",
            },
            {
               url: "https://www.openssh.com/txt/release-7.4",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-10010",
      datePublished: "2017-01-05T00:00:00",
      dateReserved: "2016-12-19T00:00:00",
      dateUpdated: "2024-08-06T03:07:32.015Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-10012

Vulnerability from cvelistv5

Published

2017-01-05 00:00

Modified

2024-08-06 03:07

Severity ?

Summary

The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.

References

▼	URL	Tags
	https://security.netapp.com/advisory/ntap-20171130-0002/
	http://www.openwall.com/lists/oss-security/2016/12/19/2	mailing-list
	http://www.securitytracker.com/id/1037490	vdb-entry
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
	https://access.redhat.com/errata/RHSA-2017:2029	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html	mailing-list
	https://www.openssh.com/txt/release-7.4
	http://www.securityfocus.com/bid/94975	vdb-entry
	https://github.com/openbsd/src/commit/3095060f479b86288e31c79ecbc5131a66bcd2f9
	https://support.f5.com/csp/article/K62201745?utm_source=f5support&amp%3Butm_medium=RSS
	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:07:31.930Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
               },
               {
                  name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
               },
               {
                  name: "1037490",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037490",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
               },
               {
                  name: "RHSA-2017:2029",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:2029",
               },
               {
                  name: "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.openssh.com/txt/release-7.4",
               },
               {
                  name: "94975",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94975",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/openbsd/src/commit/3095060f479b86288e31c79ecbc5131a66bcd2f9",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.f5.com/csp/article/K62201745?utm_source=f5support&amp%3Butm_medium=RSS",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-12-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-13T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
            },
            {
               name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
            },
            {
               name: "1037490",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securitytracker.com/id/1037490",
            },
            {
               url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
            },
            {
               url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
            },
            {
               name: "RHSA-2017:2029",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:2029",
            },
            {
               name: "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
            },
            {
               url: "https://www.openssh.com/txt/release-7.4",
            },
            {
               name: "94975",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/94975",
            },
            {
               url: "https://github.com/openbsd/src/commit/3095060f479b86288e31c79ecbc5131a66bcd2f9",
            },
            {
               url: "https://support.f5.com/csp/article/K62201745?utm_source=f5support&amp%3Butm_medium=RSS",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-10012",
      datePublished: "2017-01-05T00:00:00",
      dateReserved: "2016-12-19T00:00:00",
      dateUpdated: "2024-08-06T03:07:31.930Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-8858

Vulnerability from cvelistv5

Published

2016-12-09 00:00

Modified

2024-08-06 02:35

Severity ?

Summary

The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."

References

▼	URL	Tags
	http://www.securityfocus.com/bid/93776	vdb-entry
	http://www.openwall.com/lists/oss-security/2016/10/20/1	mailing-list
	https://security.netapp.com/advisory/ntap-20180201-0001/
	http://www.openwall.com/lists/oss-security/2016/10/19/3	mailing-list
	http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c.diff?r1=1.126&r2=1.127&f=h
	https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad
	https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:33.openssh.asc	vendor-advisory
	http://www.securitytracker.com/id/1037057	vdb-entry
	https://security.gentoo.org/glsa/201612-18	vendor-advisory
	https://bugzilla.redhat.com/show_bug.cgi?id=1384860
	http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup
	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:35:01.046Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "93776",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/93776",
               },
               {
                  name: "[oss-security] 20161020 Re: Re: CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/20/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20180201-0001/",
               },
               {
                  name: "[oss-security] 20161019 CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/19/3",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c.diff?r1=1.126&r2=1.127&f=h",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig",
               },
               {
                  name: "FreeBSD-SA-16:33",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:33.openssh.asc",
               },
               {
                  name: "1037057",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037057",
               },
               {
                  name: "GLSA-201612-18",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201612-18",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1384860",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-10-10T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests.  NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-13T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "93776",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/93776",
            },
            {
               name: "[oss-security] 20161020 Re: Re: CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/20/1",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20180201-0001/",
            },
            {
               name: "[oss-security] 20161019 CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/19/3",
            },
            {
               url: "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c.diff?r1=1.126&r2=1.127&f=h",
            },
            {
               url: "https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad",
            },
            {
               url: "https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig",
            },
            {
               name: "FreeBSD-SA-16:33",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:33.openssh.asc",
            },
            {
               name: "1037057",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securitytracker.com/id/1037057",
            },
            {
               name: "GLSA-201612-18",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/201612-18",
            },
            {
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1384860",
            },
            {
               url: "http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
            },
         ],
         tags: [
            "disputed",
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-8858",
      datePublished: "2016-12-09T00:00:00",
      dateReserved: "2016-10-19T00:00:00",
      dateUpdated: "2024-08-06T02:35:01.046Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-10011

Vulnerability from cvelistv5

Published

2017-01-05 00:00

Modified

2024-08-06 03:07

Severity ?

Summary

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.

References

▼	URL	Tags
	https://security.netapp.com/advisory/ntap-20171130-0002/
	http://www.openwall.com/lists/oss-security/2016/12/19/2	mailing-list
	http://www.securitytracker.com/id/1037490	vdb-entry
	https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
	https://access.redhat.com/errata/RHSA-2017:2029	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html	mailing-list
	http://www.securityfocus.com/bid/94977	vdb-entry
	https://www.openssh.com/txt/release-7.4
	https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:07:32.056Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
               },
               {
                  name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
               },
               {
                  name: "1037490",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037490",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
               },
               {
                  name: "RHSA-2017:2029",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:2029",
               },
               {
                  name: "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
               },
               {
                  name: "94977",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94977",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.openssh.com/txt/release-7.4",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-12-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-13T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
            },
            {
               name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
            },
            {
               name: "1037490",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securitytracker.com/id/1037490",
            },
            {
               url: "https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9",
            },
            {
               url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
            },
            {
               url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
            },
            {
               name: "RHSA-2017:2029",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:2029",
            },
            {
               name: "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
            },
            {
               name: "94977",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/94977",
            },
            {
               url: "https://www.openssh.com/txt/release-7.4",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-10011",
      datePublished: "2017-01-05T00:00:00",
      dateReserved: "2016-12-19T00:00:00",
      dateUpdated: "2024-08-06T03:07:32.056Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-10009

Vulnerability from cvelistv5

Published

2017-01-05 00:00

Modified

2025-02-13 16:27

Severity ?

Summary

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.

References

▼	URL	Tags
	https://github.com/openbsd/src/commit/9476ce1dd37d3c3218d5640b74c34c65e5f4efe5
	https://www.exploit-db.com/exploits/40963/	exploit
	https://security.netapp.com/advisory/ntap-20171130-0002/
	http://www.securityfocus.com/bid/94968	vdb-entry
	http://www.openwall.com/lists/oss-security/2016/12/19/2	mailing-list
	http://www.securitytracker.com/id/1037490	vdb-entry
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
	https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc	vendor-advisory
	https://usn.ubuntu.com/3538-1/	vendor-advisory
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
	https://access.redhat.com/errata/RHSA-2017:2029	vendor-advisory
	http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html
	https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html	mailing-list
	https://www.openssh.com/txt/release-7.4
	https://bugs.chromium.org/p/project-zero/issues/detail?id=1009
	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
	http://www.openwall.com/lists/oss-security/2023/07/19/9	mailing-list
	http://seclists.org/fulldisclosure/2023/Jul/31	mailing-list
	http://www.openwall.com/lists/oss-security/2023/07/20/1	mailing-list
	http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T03:07:31.395Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/openbsd/src/commit/9476ce1dd37d3c3218d5640b74c34c65e5f4efe5",
               },
               {
                  name: "40963",
                  tags: [
                     "exploit",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40963/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
               },
               {
                  name: "94968",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94968",
               },
               {
                  name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
               },
               {
                  name: "1037490",
                  tags: [
                     "vdb-entry",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037490",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
               },
               {
                  name: "FreeBSD-SA-17:01",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc",
               },
               {
                  name: "USN-3538-1",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3538-1/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
               },
               {
                  name: "RHSA-2017:2029",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:2029",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html",
               },
               {
                  name: "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.openssh.com/txt/release-7.4",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=1009",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
               },
               {
                  name: "[oss-security] 20230719 CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2023/07/19/9",
               },
               {
                  name: "20230719 CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2023/Jul/31",
               },
               {
                  name: "[oss-security] 20230719 Re: CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2023/07/20/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-12-19T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-07-20T11:06:10.382Z",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://github.com/openbsd/src/commit/9476ce1dd37d3c3218d5640b74c34c65e5f4efe5",
            },
            {
               name: "40963",
               tags: [
                  "exploit",
               ],
               url: "https://www.exploit-db.com/exploits/40963/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20171130-0002/",
            },
            {
               name: "94968",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securityfocus.com/bid/94968",
            },
            {
               name: "[oss-security] 20161219 Announce: OpenSSH 7.4 released",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/12/19/2",
            },
            {
               name: "1037490",
               tags: [
                  "vdb-entry",
               ],
               url: "http://www.securitytracker.com/id/1037490",
            },
            {
               url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us",
            },
            {
               name: "FreeBSD-SA-17:01",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc",
            },
            {
               name: "USN-3538-1",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://usn.ubuntu.com/3538-1/",
            },
            {
               url: "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637",
            },
            {
               name: "RHSA-2017:2029",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:2029",
            },
            {
               url: "http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html",
            },
            {
               name: "[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",
            },
            {
               url: "https://www.openssh.com/txt/release-7.4",
            },
            {
               url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=1009",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf",
            },
            {
               name: "[oss-security] 20230719 CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2023/07/19/9",
            },
            {
               name: "20230719 CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent",
               tags: [
                  "mailing-list",
               ],
               url: "http://seclists.org/fulldisclosure/2023/Jul/31",
            },
            {
               name: "[oss-security] 20230719 Re: CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2023/07/20/1",
            },
            {
               url: "http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-10009",
      datePublished: "2017-01-05T00:00:00.000Z",
      dateReserved: "2016-12-19T00:00:00.000Z",
      dateUpdated: "2025-02-13T16:27:14.083Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2016-10010

Vulnerability from cvelistv5

cve-2016-10012

Vulnerability from cvelistv5

cve-2016-8858

Vulnerability from cvelistv5

cve-2016-10011

Vulnerability from cvelistv5

cve-2016-10009

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature