SUSE-SU-2017:0607-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 06 Mar 2017, 10:26
Last modified:04 Feb 2026, 02:17

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Mar 2017, 10:26
Published
Vulnerability first disclosed
04 Feb 2026, 02:17
Last Modified
Vulnerability information updated

Description

Security update for openssh This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prevent possible leaks of host private keys to low-privilege process handling authentication (bsc#1016369) - Fix suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221) - Properly verify CIDR masks in the AllowUsers and DenyUsers configuration lists (bsc#1005893)

Affected Systems

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 12 SP1

    < 6.6p1-54.7.1

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1

    < 6.6p1-54.7.1

  • suse•openssh&distro=SUSE Linux Enterprise Server 12 SP1

    < 6.6p1-54.7.1

  • suse•openssh&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1

    < 6.6p1-54.7.1

References (9)