CVE-2016-10010: High severity OpenBSD OpenSSH vulnerability
Last updated 25 August 2025
Other sources
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/opensshto a version that resolves this vulnerability.Fixed in 1:9.2p1-2+deb12u10Fixed in 1:9.2p1-2+deb12u9Fixed in 1:10.0p1-7+deb13u4Fixed in 1:10.0p1-7+deb13u2Fixed in 1:10.6p1-1Fixed in 1:10.6p2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10010?
CVE-2016-10010 is classified as a high severity vulnerability due to its potential to allow local privilege escalation.
How do I fix CVE-2016-10010?
To fix CVE-2016-10010, upgrade OpenSSH to version 7.4 or later where the vulnerability is no longer present.
What software is affected by CVE-2016-10010?
CVE-2016-10010 affects OpenSSH versions before 7.4 when privilege separation is not enabled.
Can CVE-2016-10010 be exploited remotely?
CVE-2016-10010 requires local access to the system for exploitation, making it a local privilege escalation vulnerability.
What are the potential consequences of CVE-2016-10010?
The exploitation of CVE-2016-10010 could allow an unprivileged local user to gain root privileges on the system.