Debian/openssh: high 7.5
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a
Action: Upgrade openssh to 1:7.3p1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:7.3p1-2 | - |
Fixed versions
| 1:7.3p1-2 |
Sources
- osv: DEBIAN-CVE-2016-8858#Debian:13/openssh
- https://security-tracker.debian.org/tracker/CVE-2016-8858
published · modified · JSON