SUSE-SU-2016:0117-1: openssh-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2016:0117-1 is a vulnerability in openssh-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise with no CVSS score yet.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 14-01-2016PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for openssh-openssl1 This update for openssh-openssl1 fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645) This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Suse1 product
- openssh-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY< 6.6p1-10.1
1 vendor · 1 product
References
5 links- bugzilla.suse.com/961642REPORT
- bugzilla.suse.com/961645REPORT