CVE-2016-0778: Buffer Overflow
The (1) roamingread and (2) roamingwrite functions in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0778?
CVE-2016-0778 is classified as a medium-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2016-0778?
To fix CVE-2016-0778, upgrade OpenSSH to version 7.1p2 or later, which has addressed the vulnerability.
What types of systems are affected by CVE-2016-0778?
CVE-2016-0778 affects various systems running OpenSSH versions 5.x through 7.0, including certain distributions of Oracle Linux, Solaris, and macOS.
What impact does CVE-2016-0778 have on system security?
CVE-2016-0778 allows an attacker to exploit connection handling flaws, potentially leading to a denial of service on affected systems.
When was CVE-2016-0778 discovered?
CVE-2016-0778 was publicly disclosed in March 2016, prompting immediate attention and action from affected software vendors.