This update for openssh fixes several issues.

These security issues were fixed :

  - CVE-2016-8858: The kex_input_kexinit function in kex.c     allowed remote attackers to cause a denial of service     (memory consumption) by sending many duplicate KEXINIT     requests (bsc#1005480).

  - CVE-2016-10012: The shared memory manager (associated     with pre-authentication compression) did not ensure that     a bounds check is enforced by all compilers, which might     allowed local users to gain privileges by leveraging     access to a sandboxed privilege-separation process,     related to the m_zback and m_zlib data structures     (bsc#1016370).

  - CVE-2016-10009: Untrusted search path vulnerability in     ssh-agent.c allowed remote attackers to execute     arbitrary local PKCS#11 modules by leveraging control     over a forwarded agent-socket (bsc#1016366).

  - CVE-2016-10010: When forwarding unix domain sockets with     privilege separation disabled, the resulting sockets     have be created as 'root' instead of the authenticated     user. Forwarding unix domain sockets without privilege     separation enabled is now rejected.

  - CVE-2016-10011: authfile.c in sshd did not properly     consider the effects of realloc on buffer contents,     which might allowed local users to obtain sensitive     private-key information by leveraging access to a     privilege-separated child process (bsc#1016369).

These non-security issues were fixed :

  - Adjusted suggested command for removing conflicting     server keys from the known_hosts file (bsc#1006221)

  - Properly verify CIDR masks in configuration (bsc#1005893     bsc#1021626)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for openssh fixes the following issues :

  - CVE-2016-8858: prevent resource depletion during key     exchange (bsc#1005480)

  - CVE-2016-10009: limit directories for loading PKCS11     modules to avoid privilege escalation (bsc#1016366)

  - CVE-2016-10011: Prevent possible leaks of host private     keys to low-privilege process handling authentication     (bsc#1016369)

  - Fix suggested command for removing conflicting server     keys from the known_hosts file (bsc#1006221)

  - Properly verify CIDR masks in the AllowUsers and     DenyUsers configuration lists (bsc#1005893)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssh fixes the following issues :

  - CVE-2016-8858: prevent resource depletion during key     exchange (bsc#1005480)

  - CVE-2016-10009: limit directories for loading PKCS11     modules to avoid privilege escalation (bsc#1016366)

  - CVE-2016-10011: Prevent possible leaks of host private     keys to low-privilege process handling authentication     (bsc#1016369)

  - Fix suggested command for removing conflicting server     keys from the known_hosts file (bsc#1006221)

  - Properly verify CIDR masks in the AllowUsers and     DenyUsers configuration lists (bsc#1005893)

This update was imported from the SUSE:SLE-12:Update update project.

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Untrusted search path vulnerability in ssh-agent.c in     ssh-agent in OpenSSH before 7.4 allows remote attackers     to execute arbitrary local PKCS#11 modules by     leveraging control over a forwarded     agent-socket.(CVE-2016-10009)

  - authfile.c in sshd in OpenSSH before 7.4 does not     properly consider the effects of realloc on buffer     contents, which might allow local users to obtain     sensitive private-key information by leveraging access     to a privilege-separated child process.(CVE-2016-10011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
96919	openSUSE Security Update : openssh (openSUSE-2017-184)	Nessus	SuSE Local Security Checks	2017/2/1	2026/1/2	high
97653	SUSE SLES12 Security Update : openssh (SUSE-SU-2017:0607-3)	Nessus	SuSE Local Security Checks	2017/3/10	2025/12/30	high
97716	openSUSE Security Update : openssh (openSUSE-2017-339)	Nessus	SuSE Local Security Checks	2017/3/14	2025/12/30	high
99900	EulerOS 2.0 SP1 : openssh (EulerOS-SA-2017-1055)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	high

检测

插件搜索

high

high

high

high