CVE-2016-1907

Published: 19 January 2016

The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.

Priority

CVSS 3 base score: 5.3

Status

Package	Release	Status
openssh Launchpad, Ubuntu, Debian	precise	Not vulnerable (1:5.9p1-5ubuntu1.8)
	trusty	Not vulnerable (1:6.6p1-2ubuntu2.4)
	upstream	Released (1:7.1p2-1)
	vivid	Not vulnerable (1:6.7p1-5ubuntu1.4)
	wily	Released (1:6.9p1-2ubuntu0.2)
	xenial	Not vulnerable (1:7.1p2-1)

Notes

Author	Note
mdeslaur	introduced in 6.8

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1907
http://seclists.org/oss-sec/2016/q1/112
https://ubuntu.com/security/notices/USN-2966-1
NVD
Launchpad
Debian

Bugs

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›