SUSE-SU-2017:0603-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 03 Mar 2017, 16:46
Last modified:04 Feb 2026, 04:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Mar 2017, 16:46
Published
Vulnerability first disclosed
04 Feb 2026, 04:33
Last Modified
Vulnerability information updated

Description

Security update for openssh This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prevent possible leaks of host private keys to low-privilege process handling authentication (bsc#1016369) Non security issues fixed: - Properly verify CIDR masks in the AllowUsers and DenyUsers configuration lists (bsc#1005893) - fix suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221)

Affected Systems

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 11 SP4

    < 6.6p1-35.4

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

    < 6.6p1-35.4

  • suse•openssh&distro=SUSE Linux Enterprise Server 11 SP4

    < 6.6p1-35.1

  • suse•openssh&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

    < 6.6p1-35.1

References (9)