The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Aix 6.1 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Aix 7.1 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Aix 7.2 Openssh_advisory10 | — | — | Apr 5, 2017 | Jan 4, 2017 |
| Alpine Linux | — | Upgrade openssh | Sep 20, 2017 | Jan 5, 2017 |
| Amazon_linux | — | Upgrade openssh | Oct 3, 2017 | Jan 4, 2017 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | Mar 28, 2017 | Jan 4, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 5, 2017 |
| Centos_linux | — | Upgrade openssh-server-sysvinitUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-debuginfoUpgrade openssh-ldap | Aug 28, 2019 | Jan 5, 2017 |
| Debian | — | Upgrade openssh | Feb 25, 2019 | Jan 4, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 27, 2017 |
| Hpux | — | Apply the remediation from HP for CVE-2016-10012 | Jul 3, 2018 | Jan 4, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade opensshUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-clients | Nov 30, 2017 | Jan 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssh-keycatUpgrade openssh-clientsUpgrade opensshUpgrade openssh-serverUpgrade openssh-askpass | Nov 30, 2017 | Jan 4, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory10 | Nov 30, 2017 | Jan 4, 2017 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 7.4 | Jan 9, 2017 | Jan 4, 2017 |
| Oracle Solaris | — | Upgrade network/openssh to version 7.4.0.1-0.175.3.20.0.3.0 on Solaris 11.3 | May 29, 2017 | Jan 4, 2017 |
| Oracle_linux | — | Upgrade openssh-ldapUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-clientsUpgrade openssh-cavsUpgrade openssh-server-sysvinitUpgrade pam_ssh_agent_authUpgrade openssh | Aug 8, 2017 | Dec 19, 2016 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 9.0 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Jun 17, 2020 | Jun 17, 2020 |
| Redhat_linux | — | Upgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-debuginfoUpgrade openssh-clientsUpgrade opensshUpgrade openssh-askpassUpgrade openssh-keycatUpgrade pam_ssh_agent_authNo solution existsUpgrade openssh-server-sysvinitUpgrade openssh-cavs | Aug 3, 2017 | Jan 4, 2017 |
| Suse | — | Upgrade openssh-clientsUpgrade openssh-helpersUpgrade opensshUpgrade openssh-fipsUpgrade openssh-openssl1Upgrade openssh-askpass-gnomeUpgrade openssh-askpassUpgrade openssh-openssl1-helpersUpgrade openssh-serverUpgrade openssh-common | Jan 24, 2017 | Jan 4, 2017 |
| Ubuntu | — | Upgrade openssh-server | Jan 24, 2018 | Jan 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub