SUSE-SU-2017:1661-1: openssh-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise

Published

Published 23-06-2017Last modified 02-05-2025

Vulnerability summary

SUSE-SU-2017:1661-1 is a vulnerability in openssh-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise with no CVSS score yet.

Priority

Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0 · Related 3

CVE-2016-10009 CVE-2016-10011 CVE-2016-8858

Timeline

23-06-2017
PublishedVulnerability first disclosed.
02-05-2025
Last modifiedVulnerability information updated.

Description

Security update for openssh-openssl1 This update for openssh-openssl1 fixes the following issues: - Properly verify CIDR masks in configuration (bsc#1005893) - CVE-2016-10009: limit directories for loading PKCS11 modules (bsc#1016366) - CVE-2016-10011: Prevent possible leaks of host private keys to low-privilege process handling authentication (bsc#1016369) - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - fix suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221)