CVE-2016-0787: Infoleak
The diffiehellmansha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0787?
CVE-2016-0787 is considered to have a high severity due to its potential impact on SSH session confidentiality.
How do I fix CVE-2016-0787?
To fix CVE-2016-0787, upgrade to libssh2 version 1.7.0 or later, and ensure you are using secure cryptographic settings.
What software is affected by CVE-2016-0787?
CVE-2016-0787 affects libssh2 versions up to 1.6.0 and multiple Linux distributions including Fedora 22, Fedora 23, openSUSE 13.2, and Debian 7.0 or 8.0.
What types of attacks does CVE-2016-0787 expose systems to?
CVE-2016-0787 makes systems vulnerable to man-in-the-middle attacks that can lead to session decryption or interception.
Is CVE-2016-0787 a critical vulnerability?
While not classified as critical, CVE-2016-0787 poses a significant risk due to its exploitation potential affecting SSH communications.