This update for openssh fixes the following issues :

  - CVE-2016-8858: prevent resource depletion during key     exchange (bsc#1005480)

  - CVE-2016-10009: limit directories for loading PKCS11     modules to avoid privilege escalation (bsc#1016366)

  - CVE-2016-10011: Prevent possible leaks of host private     keys to low-privilege process handling authentication     (bsc#1016369)

  - Fix suggested command for removing conflicting server     keys from the known_hosts file (bsc#1006221)

  - Properly verify CIDR masks in the AllowUsers and     DenyUsers configuration lists (bsc#1005893)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Untrusted search path vulnerability in ssh-agent.c in     ssh-agent in OpenSSH before 7.4 allows remote attackers     to execute arbitrary local PKCS#11 modules by     leveraging control over a forwarded     agent-socket.(CVE-2016-10009)

  - authfile.c in sshd in OpenSSH before 7.4 does not     properly consider the effects of realloc on buffer     contents, which might allow local users to obtain     sensitive private-key information by leveraging access     to a privilege-separated child process.(CVE-2016-10011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote     attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
    (CVE-2016-10009)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update for openssh is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

The following packages have been upgraded to a later upstream version:
openssh (7.4p1). (BZ#1341754)

Security Fix(es) :

* A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticated attacker could possibly use this flaw to determine valid user names by measuring the timing of server responses. (CVE-2016-6210)

* It was found that OpenSSH did not limit password lengths for password authentication. A remote unauthenticated attacker could use this flaw to temporarily trigger high CPU consumption in sshd by sending long passwords. (CVE-2016-6515)

* It was found that ssh-agent could load PKCS#11 modules from arbitrary paths. An attacker having control of the forwarded agent-socket on the server, and the ability to write to the filesystem of the client host, could use this flaw to execute arbitrary code with the privileges of the user running ssh-agent. (CVE-2016-10009)

* It was found that the host private key material could possibly leak to the privilege-separated child processes via re-allocated memory. An attacker able to compromise the privilege-separated process could therefore obtain the leaked key information. (CVE-2016-10011)

* It was found that the boundary checks in the code implementing support for pre-authentication compression could have been optimized out by certain compilers. An attacker able to compromise the privilege-separated process could possibly use this flaw for further attacks against the privileged monitor process. (CVE-2016-10012)

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
97652	SUSE SLED12 Security Update : openssh (SUSE-SU-2017:0607-2)	Nessus	SuSE Local Security Checks	2017/3/10	2025/12/30	high
99899	EulerOS 2.0 SP2 : openssh (EulerOS-SA-2017-1054)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	high
219399	Linux Distros Unpatched Vulnerability : CVE-2016-10009	Nessus	Misc.	2025/3/4	2026/7/19	high
102751	CentOS 7 : openssh (CESA-2017:2029)	Nessus	CentOS Local Security Checks	2017/8/25	2025/11/25	high

检测

插件搜索

high

high

high

high