CVE-2019-16905: Integer Overflow
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16905?
The severity of CVE-2019-16905 is high with a severity value of 7.8.
Which software versions are affected by CVE-2019-16905?
OpenSSH versions 7.7 through 7.9 and versions 8.x before 8.1 when compiled with an experimental key type are affected. Netapp Cloud Backup and Netapp Steelstore Cloud Integrated Storage are also affected.
How does CVE-2019-16905 affect OpenSSH?
CVE-2019-16905 affects OpenSSH when it is compiled with an experimental key type, leading to a pre-authentication integer overflow and memory corruption.
Is Siemens Scalance X204rna vulnerable to CVE-2019-16905?
Siemens Scalance X204rna is vulnerable to CVE-2019-16905 if it is running the affected firmware versions.
How can I fix the vulnerability in OpenSSH?
To fix the vulnerability in OpenSSH, you should update to version 8.1 or higher.