DEBIAN-CVE-2016-0777

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2016-0777
Published: 14 Jan 2016, 22:59
Last modified:28 Apr 2026, 20:15

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.5 MEDIUM
3.0 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Jan 2016, 22:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:15
Last Modified
Vulnerability information updated

Description

The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.

CVSS Metrics

  • v3.0•MEDIUM•Score: 6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Systems

  • debian•openssh

    < 1:7.1p2-1 | < 1:7.1p2-1 | < 1:7.1p2-1 | < 1:7.1p2-1

References (1)