tocsin

Debian/openssh: unknown

The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows r

Action: Upgrade openssh to 1:6.4p1-1 or later.

Affected

introducedfixedlast affected
01:6.4p1-1-

Fixed versions

1:6.4p1-1

Sources

published · modified · JSON