CVE Daily

CVE-2016-10011

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects ...

Medium CVSS 5.5

Overview

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.

CWE: CWE-320 Published: 2017-01-05T02:59:03.120
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags