vulnerability
Oracle Solaris 11: CVE-2016-0777 (11.3 SRU 5.6.0)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Jan 14, 2016 | May 29, 2017 | Feb 1, 2022 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Jan 14, 2016
Added
May 29, 2017
Modified
Feb 1, 2022
Description
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
Solution
oracle-solaris-11-3-upgrade-network-openssh-7-1-0-1-0-175-3-5-0-5-0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.