The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-openssh | Jul 30, 2024 | Dec 9, 2016 | |
| Freebsd | freebsd-upgrade-package-openssh-portablefreebsd-upgrade-base-11_0-release-p3freebsd-upgrade-base-10_3-release-p12 | Nov 14, 2016 | Oct 29, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-openssh | Oct 30, 2017 | Dec 9, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-opensshhuawei-euleros-2_0_sp1-upgrade-openssh-askpasshuawei-euleros-2_0_sp1-upgrade-openssh-clientshuawei-euleros-2_0_sp1-upgrade-openssh-keycathuawei-euleros-2_0_sp1-upgrade-openssh-server | Nov 30, 2017 | Dec 9, 2016 | |
| Ibm Aix | ibm-aix-openssh_advisory10 | Nov 30, 2017 | Dec 9, 2016 | |
| Openbsd Openssh | openbsd-openssh-upgrade-latest | Dec 12, 2016 | Dec 9, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-network-openssh-7-3-0-1-0-175-3-15-0-2-0 | May 29, 2017 | Dec 9, 2016 | |
| Suse | — | suse-upgrade-opensshsuse-upgrade-openssh-askpasssuse-upgrade-openssh-askpass-gnomesuse-upgrade-openssh-clientssuse-upgrade-openssh-commonsuse-upgrade-openssh-fipssuse-upgrade-openssh-helperssuse-upgrade-openssh-openssl1suse-upgrade-openssh-openssl1-helperssuse-upgrade-openssh-server | Jan 24, 2017 | Dec 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub